--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e750c4a0bb57e704d3ff5b0847a7538346f12f6086cd27a5678b73da3527b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e750c4a0bb57e704d3ff5b0847a7538346f12f6086cd27a5678b73da3527b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e750c4a0bb57e704d3ff5b0847a7538346f12f6086cd27a5678b73da3527b07"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"error","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:56:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156170,"nanos":16566535},"http":{"id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dedbbb12-bce5-4dc9-bc72-b099e76d5087","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44520","PortSpecifier":{"PortValue":44520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44520","PortSpecifier":{"PortValue":44520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156170,"nanos":74278276},"http":{"id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bea99d0-d035-4e7c-ab7e-2cffe1465568","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","method":"GET","path":"/maas-api/v1/api-keys/4d316fb5-368d-427c-acba-2d0f7630cbf6","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156170,"nanos":128823471},"http":{"id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","method":"GET","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d316fb5-368d-427c-acba-2d0f7630cbf6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d316fb5-368d-427c-acba-2d0f7630cbf6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65caf5d2-6a99-9a65-8fd5-b1d69d84ae2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44526","PortSpecifier":{"PortValue":44526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","method":"GET","path":"/maas-api/v1/api-keys/ab85fd05-04c0-4bff-9376-0b9594f1c69d","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44526","PortSpecifier":{"PortValue":44526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156170,"nanos":161707848},"http":{"id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","method":"GET","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab85fd05-04c0-4bff-9376-0b9594f1c69d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ab85fd05-04c0-4bff-9376-0b9594f1c69d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e1c8209-20ef-41e9-bb87-851a6b11ff59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56446","PortSpecifier":{"PortValue":56446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56446","PortSpecifier":{"PortValue":56446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156185,"nanos":183361082},"http":{"id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef17c2f2-2fa8-4f31-b5e1-c02c80eac608","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55340","PortSpecifier":{"PortValue":55340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55340","PortSpecifier":{"PortValue":55340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156185,"nanos":230313047},"http":{"id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40c7ab85-c626-4dc2-af89-04ede56fdde8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56460","PortSpecifier":{"PortValue":56460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56460","PortSpecifier":{"PortValue":56460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156185,"nanos":270997729},"http":{"id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","method":"GET","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fS2yWiMZttZNh8QV_H8saPwkJ3dGaVRa2eDqqEAIyQzio3KO3tkI6NHWfuJb"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fS2yWiMZttZNh8QV_H8saPwkJ3dGaVRa2eDqqEAIyQzio3KO3tkI6NHWfuJb\"}"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b03040f-601f-4206-a416-a26d5b1ccc65","keyName":"e2e-auth-iso-a-5d2156","subscription":"e2e-auth-iso-3215c9","tenant":"e2e-shared-a-d5b2a8","userId":"9b03040f-601f-4206-a416-a26d5b1ccc65","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3215c9"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c07d2cb-693f-4069-a8d5-85d6a7910b13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156204,"nanos":486285349},"http":{"id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122c4ea7-9a77-4e18-b5e8-bd991bb215dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53104","PortSpecifier":{"PortValue":53104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32707a53-6cf9-4878-b4d2-2320a5d66453","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53104","PortSpecifier":{"PortValue":53104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156204,"nanos":515964213},"http":{"id":"32707a53-6cf9-4878-b4d2-2320a5d66453","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32707a53-6cf9-4878-b4d2-2320a5d66453","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53110","PortSpecifier":{"PortValue":53110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53110","PortSpecifier":{"PortValue":53110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156204,"nanos":545098870},"http":{"id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","method":"GET","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ekyWzJqkOJ0IiN98_UNvdsadm19PR6y5J5u3jB4D2QVbs6X7lclY9M0SP9I3"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ekyWzJqkOJ0IiN98_UNvdsadm19PR6y5J5u3jB4D2QVbs6X7lclY9M0SP9I3\"}"}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T22:56:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74edfc6c-59d6-4667-b2bc-bffbdc4de096","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156221,"nanos":669437013},"http":{"id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b6c43e8-0ee3-4ba1-969e-d5c3368571b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45130","PortSpecifier":{"PortValue":45130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52e4b3db-ada2-4032-9f38-1afad16115d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45130","PortSpecifier":{"PortValue":45130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156221,"nanos":703136581},"http":{"id":"52e4b3db-ada2-4032-9f38-1afad16115d3","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e4b3db-ada2-4032-9f38-1afad16115d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e30654-7ec9-4055-b412-bb282738f64b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34e30654-7ec9-4055-b412-bb282738f64b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e30654-7ec9-4055-b412-bb282738f64b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43334","PortSpecifier":{"PortValue":43334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156221,"nanos":735982217},"http":{"id":"34e30654-7ec9-4055-b412-bb282738f64b","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34e30654-7ec9-4055-b412-bb282738f64b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34e30654-7ec9-4055-b412-bb282738f64b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e30654-7ec9-4055-b412-bb282738f64b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e30654-7ec9-4055-b412-bb282738f64b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e30654-7ec9-4055-b412-bb282738f64b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45146","PortSpecifier":{"PortValue":45146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45146","PortSpecifier":{"PortValue":45146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156221,"nanos":788611932},"http":{"id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa71f4f2-0078-4320-bda7-a47cc104ee95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58176","PortSpecifier":{"PortValue":58176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c2567d1-da04-463b-ae51-4638a97f388f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58176","PortSpecifier":{"PortValue":58176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156236,"nanos":807594119},"http":{"id":"3c2567d1-da04-463b-ae51-4638a97f388f","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2567d1-da04-463b-ae51-4638a97f388f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156236,"nanos":841001355},"http":{"id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe7b737e-89f7-4d18-bcb5-6aff258805ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89f31806-691f-4345-b752-6208d3f85781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50938","PortSpecifier":{"PortValue":50938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89f31806-691f-4345-b752-6208d3f85781","method":"GET","path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89f31806-691f-4345-b752-6208d3f85781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50938","PortSpecifier":{"PortValue":50938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156236,"nanos":874263509},"http":{"id":"89f31806-691f-4345-b752-6208d3f85781","method":"GET","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89f31806-691f-4345-b752-6208d3f85781","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89f31806-691f-4345-b752-6208d3f85781","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89f31806-691f-4345-b752-6208d3f85781","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89f31806-691f-4345-b752-6208d3f85781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89f31806-691f-4345-b752-6208d3f85781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","method":"GET","path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156236,"nanos":904015915},"http":{"id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","method":"GET","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/941a0df5-dae0-495c-b71d-2dfa0ebcc588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374fe6c8-a1d1-4cd2-a1ad-8ba766183d6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156254,"nanos":53768892},"http":{"id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e999a67e-94bc-4bdf-a6cb-f4d4b1fa71a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60748","PortSpecifier":{"PortValue":60748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60748","PortSpecifier":{"PortValue":60748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156254,"nanos":88866833},"http":{"id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/auth-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f15f02d5-16f8-4859-aaff-a9aa9808bb48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3034145a-af81-4fea-ad20-18322aea51ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33240","PortSpecifier":{"PortValue":33240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3034145a-af81-4fea-ad20-18322aea51ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3034145a-af81-4fea-ad20-18322aea51ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33240","PortSpecifier":{"PortValue":33240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156254,"nanos":118823013},"http":{"id":"3034145a-af81-4fea-ad20-18322aea51ec","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WM8OK0fBPv0FPFFe_4Ma0gAAafuQvuq5pTOVIfniaafnCDPTF2ZwxkBDETTJ"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WM8OK0fBPv0FPFFe_4Ma0gAAafuQvuq5pTOVIfniaafnCDPTF2ZwxkBDETTJ\"}"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76a709a0-7f93-48be-b632-f2b21de2a129","keyName":"e2e-auth-iso-a-7e356d","subscription":"e2e-auth-iso-749506","tenant":"e2e-shared-a-d5b2a8","userId":"76a709a0-7f93-48be-b632-f2b21de2a129","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3034145a-af81-4fea-ad20-18322aea51ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/auth-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-749506"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3034145a-af81-4fea-ad20-18322aea51ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3034145a-af81-4fea-ad20-18322aea51ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3034145a-af81-4fea-ad20-18322aea51ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab249ff158e24be33a9c09ec0463cf6a987292a5e12b292f424740d9d595c82"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e00cec59a57c1f12c27582c1fae2f6c8804664c59eb419f51f15ecaddf1fb8c0"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/add6c8d39ff182ca39d8ccdf50e55b81cb17b015dfd00f7190b6eac2c6662a6b"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbdceb26e6c1ff245670aa8ac208b89521a8152ca4618c6f7677eea18c24af0a"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2ed85271a8cd39298d517031104d33ddb2dd605631a8357d45840720f5c43a6"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc8affe95d668a982c2cfc06c26d2828da11684d56b9868e9909aee6e94bffe"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f3a86a7cf087a70b9b256b0a7bcc7cbb6e798de91f1081f72cd00f1759cfd75"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7898fe78c6b590ba0a4ffb92e6a21f7be7b4d5c2b576ef4591e9219db38986c4"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ef46e4ba58efc9611c4aadeaab7930bc3c04bf8cafa0feb2cc88d4ab47dd3fe"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1636764d94a368aefb7346dde96fb67aa12d076adcaf015ca25c992bc27f77f2"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6811277c50e6b3a62aed0b35a7d2d28ba11926f045ac8e51015f26e22abd7d2"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6236ae4a27eaedc47c881e7ad7487c7886ede925b22748d890b50928c1f71642"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac9f9b464a8c18c48e0390216f5f63863bd6ecee66a9410b6f1e66b47f82c10a"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40a448e8f9a8519b406ea10ae8c6940d26d7ded4f525bae9741cf8b153b17648"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f56d528f81bd3dd43d09567922433e1b38332c6ce784888c6679f77e5ba3368"}
{"level":"info","ts":"2026-07-15T22:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e750c4a0bb57e704d3ff5b0847a7538346f12f6086cd27a5678b73da3527b07"}
{"level":"debug","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"}
{"level":"debug","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"}
{"level":"info","ts":"2026-07-15T22:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"error","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:58:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"}
{"level":"debug","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"}
{"level":"info","ts":"2026-07-15T22:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1751dfad-306a-484f-a454-de921b87e03d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58708","PortSpecifier":{"PortValue":58708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1751dfad-306a-484f-a454-de921b87e03d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1751dfad-306a-484f-a454-de921b87e03d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58708","PortSpecifier":{"PortValue":58708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156317,"nanos":132357560},"http":{"id":"1751dfad-306a-484f-a454-de921b87e03d","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1751dfad-306a-484f-a454-de921b87e03d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1751dfad-306a-484f-a454-de921b87e03d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/sub-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1751dfad-306a-484f-a454-de921b87e03d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1751dfad-306a-484f-a454-de921b87e03d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1751dfad-306a-484f-a454-de921b87e03d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47000","PortSpecifier":{"PortValue":47000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47000","PortSpecifier":{"PortValue":47000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156317,"nanos":170065655},"http":{"id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/sub-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34da09f5-766a-4c7b-98d7-c6098c4b8ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58714","PortSpecifier":{"PortValue":58714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156317,"nanos":205677980},"http":{"id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","method":"GET","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-J0YFFJRTsUMoekKJ_B2VPOEa4ZFntRPtxSdZ8GRXCB9BcmHytMfg5QcdzDOQ"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-J0YFFJRTsUMoekKJ_B2VPOEa4ZFntRPtxSdZ8GRXCB9BcmHytMfg5QcdzDOQ\"}"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"deb89e4d-a839-4a18-bcb5-c05fcb5d40b0","keyName":"e2e-sub-iso-df2530","subscription":"e2e-a-only-9882c5","tenant":"e2e-shared-a-d5b2a8","userId":"deb89e4d-a839-4a18-bcb5-c05fcb5d40b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/sub-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9882c5"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1848d253-1ae4-4631-8c81-4fef82e0c9b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47010","PortSpecifier":{"PortValue":47010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47010","PortSpecifier":{"PortValue":47010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156317,"nanos":240096638},"http":{"id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","method":"GET","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vapDu7lKQuLIEdeF_uspFgXZCn25ogNJ2jCZKAVdrThXbRP7sMC16etJ9EFK"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vapDu7lKQuLIEdeF_uspFgXZCn25ogNJ2jCZKAVdrThXbRP7sMC16etJ9EFK\"}"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2197dc46-2319-4cb1-957f-bf213b7f4888","keyName":"e2e-sub-iso-126f77","subscription":"e2e-b-only-9882c5","tenant":"e2e-shared-b-1e65bd","userId":"2197dc46-2319-4cb1-957f-bf213b7f4888","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/sub-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9882c5"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6e65540-7063-44a5-bb43-aad6e69b1afa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48792","PortSpecifier":{"PortValue":48792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e52d48b1-5903-4799-95e2-f4fde5614371","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48792","PortSpecifier":{"PortValue":48792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156333,"nanos":754888251},"http":{"id":"e52d48b1-5903-4799-95e2-f4fde5614371","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/sub-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e52d48b1-5903-4799-95e2-f4fde5614371","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38080","PortSpecifier":{"PortValue":38080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38080","PortSpecifier":{"PortValue":38080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156333,"nanos":789373614},"http":{"id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/sub-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d52dd5b-4400-4c6f-93fd-b12d3cdae20a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48796","PortSpecifier":{"PortValue":48796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48796","PortSpecifier":{"PortValue":48796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156333,"nanos":822849823},"http":{"id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1INDyqN5obyPVGo25_peuiRCCAlXvBcpkPBjYhkP0RpkbwHwYeOo2X1erL6zQ"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1INDyqN5obyPVGo25_peuiRCCAlXvBcpkPBjYhkP0RpkbwHwYeOo2X1erL6zQ\"}"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94929045-b550-44e9-918d-998657d44cd9","keyName":"e2e-sub-iso-7e85de","subscription":"e2e-shared-sub-25f942","tenant":"e2e-shared-a-d5b2a8","userId":"94929045-b550-44e9-918d-998657d44cd9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/sub-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-25f942"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6517ef90-df2f-41b2-8d1d-b3ae66037c60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38090","PortSpecifier":{"PortValue":38090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156333,"nanos":849651527},"http":{"id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gEf2rwUr8pMI9yuu_cZOP6FfYdiUZWu3ThDLuiSGbabEo50Obph6kPuvjwet"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gEf2rwUr8pMI9yuu_cZOP6FfYdiUZWu3ThDLuiSGbabEo50Obph6kPuvjwet\"}"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a13fc79a-5c4f-4b33-aeaf-dda03d4a62a3","keyName":"e2e-sub-iso-c9fb0f","subscription":"e2e-shared-sub-25f942","tenant":"e2e-shared-b-1e65bd","userId":"a13fc79a-5c4f-4b33-aeaf-dda03d4a62a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/sub-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-25f942"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342562a2-5e8f-4f8a-9a90-62b1ce98af8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:58:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a510d7a22b69fbb1c07e7c1c55bc9cdd7f6924febd6b5d0ee6ba0487c69522e1"}
{"level":"info","ts":"2026-07-15T22:58:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1e594906fa1803340d9669f2f96afc14ff39d4655ee6fb3ccc39cbe554b2d9d"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30376d2812986a1caad2d9b158875bd43162437b46a6ab1ee808a9cdc9e4e8e9"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff36376aa50a9b656881eb3d813f644293ab73ab9ff20ad93ef86f3b72a69ca3"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15b7313c3bcc4dc00ca39bf99b7cc3e921664921405b3e4dd25849cee66573c2"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86f569b640461f3daab94de44adf2f5552b1c127c0b5b50b9ae88eecee9ebeef"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2d41ee42c2025e845b6e8b405c7f92cf3a42a7a499846d9ed09b9230e3613bd"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/104eee3f3ab5737abe8a8bfa4c3b2befbc6dc3cd3bac65e66e98c8397059847a"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67f149581c5010414af89b92c1a2a8f63236c39d54a8520512218f645bac3d78"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86804e6e410441700b90bb9e0ca610e5fae400d3c9a2bfa499b1f316fc6166de"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ab2e1ee3ca2248275623243f56e7d08539a858b7506238a44de63a212856a71"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a6c62c7957aa3a29825a24b84eb90b8911fb2cd1790bc08166e14423d1c6c6"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a3494a51a8fbd0edb66135fe0717c93dfc50dc954976e7d83af39664656b5d8"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd423cb6c4ee607a8cbb0cbaa5eedc39ead644668ba3e21ad05490323508ba9"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed26942ffadf0f36723d254b6680f3d743247f2fd5d4dd0e81a3fc096cce5de6"}
{"level":"info","ts":"2026-07-15T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c21191e54a323b989265858901a51c85177792c98f634e5a4d06be8a0481b080"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"error","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"error","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75"}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"}
{"level":"debug","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"error","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T22:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"debug","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"info","ts":"2026-07-15T22:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da261bad-fd60-423f-8291-c05ac9483327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da261bad-fd60-423f-8291-c05ac9483327","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da261bad-fd60-423f-8291-c05ac9483327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57886","PortSpecifier":{"PortValue":57886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156384,"nanos":244279524},"http":{"id":"da261bad-fd60-423f-8291-c05ac9483327","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da261bad-fd60-423f-8291-c05ac9483327","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da261bad-fd60-423f-8291-c05ac9483327","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da261bad-fd60-423f-8291-c05ac9483327","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da261bad-fd60-423f-8291-c05ac9483327","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da261bad-fd60-423f-8291-c05ac9483327","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1d044f0-147a-49d9-b918-90056be1ed9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156384,"nanos":280553292},"http":{"id":"a1d044f0-147a-49d9-b918-90056be1ed9e","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1d044f0-147a-49d9-b918-90056be1ed9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57900","PortSpecifier":{"PortValue":57900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57900","PortSpecifier":{"PortValue":57900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156384,"nanos":313323504},"http":{"id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh\"}"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","subscription":"e2e-rate-iso-a-38848b","tenant":"e2e-shared-a-d5b2a8","userId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-38848b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38848b"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","selected_subscription":"e2e-rate-iso-a-38848b","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-38848b@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11965f8f-9f4d-402d-9ce3-2ce6b3b231a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57902","PortSpecifier":{"PortValue":57902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57902","PortSpecifier":{"PortValue":57902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156385,"nanos":361932506},"http":{"id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh\"}"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","subscription":"e2e-rate-iso-a-38848b","tenant":"e2e-shared-a-d5b2a8","userId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-38848b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38848b"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","selected_subscription":"e2e-rate-iso-a-38848b","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-38848b@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a6279af-96d9-48af-a94f-fbfd0aac83b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57910","PortSpecifier":{"PortValue":57910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59997765-fc82-4517-ab0a-8fd21c1e16db","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57910","PortSpecifier":{"PortValue":57910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156386,"nanos":395189323},"http":{"id":"59997765-fc82-4517-ab0a-8fd21c1e16db","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hF71YKX8cbMLrAzW_eflntWPSXSXp1ZcMQwc4Xdw1d6l8iPlR8NwiQ1NuWFh\"}"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","subscription":"e2e-rate-iso-a-38848b","tenant":"e2e-shared-a-d5b2a8","userId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-38848b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38848b"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c392edaa-5958-45e9-b5af-a5b54b979ac4","keyName":"e2e-rate-a-38848b","selected_subscription":"e2e-rate-iso-a-38848b","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-38848b@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38848b","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59997765-fc82-4517-ab0a-8fd21c1e16db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50888","PortSpecifier":{"PortValue":50888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50888","PortSpecifier":{"PortValue":50888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156393,"nanos":17267800},"http":{"id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c19f35-1c32-480a-bc6e-4b2d8cbdbf76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156393,"nanos":51526803},"http":{"id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"]}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4ba8263b6ee4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b5d217e0-35e9-43b9-be1a-1b5df29f8274"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee444cb8-b7c1-4f6f-8709-581e6b129f53","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4c642c-369d-4877-8555-a4cc3f643f4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50894","PortSpecifier":{"PortValue":50894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50894","PortSpecifier":{"PortValue":50894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156393,"nanos":80677357},"http":{"id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f4974b-d135-4a90-a31d-43a344f05e9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9583942-916c-469c-95c3-1dc1154d4097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9583942-916c-469c-95c3-1dc1154d4097","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9583942-916c-469c-95c3-1dc1154d4097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156394,"nanos":109070900},"http":{"id":"f9583942-916c-469c-95c3-1dc1154d4097","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9583942-916c-469c-95c3-1dc1154d4097","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9583942-916c-469c-95c3-1dc1154d4097","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9583942-916c-469c-95c3-1dc1154d4097","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9583942-916c-469c-95c3-1dc1154d4097","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436557d9-c957-48b1-83bd-4a253cd09441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"436557d9-c957-48b1-83bd-4a253cd09441","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436557d9-c957-48b1-83bd-4a253cd09441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156395,"nanos":156019153},"http":{"id":"436557d9-c957-48b1-83bd-4a253cd09441","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"436557d9-c957-48b1-83bd-4a253cd09441","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436557d9-c957-48b1-83bd-4a253cd09441","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436557d9-c957-48b1-83bd-4a253cd09441","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436557d9-c957-48b1-83bd-4a253cd09441","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50914","PortSpecifier":{"PortValue":50914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50914","PortSpecifier":{"PortValue":50914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156396,"nanos":190871265},"http":{"id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65f87ca4-fc5e-4738-a406-3f2e891d3d7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a687812f-6d68-4804-85f0-6e7252516c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a687812f-6d68-4804-85f0-6e7252516c14","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a687812f-6d68-4804-85f0-6e7252516c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50922","PortSpecifier":{"PortValue":50922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156397,"nanos":226128166},"http":{"id":"a687812f-6d68-4804-85f0-6e7252516c14","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a687812f-6d68-4804-85f0-6e7252516c14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a687812f-6d68-4804-85f0-6e7252516c14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a687812f-6d68-4804-85f0-6e7252516c14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a687812f-6d68-4804-85f0-6e7252516c14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156398,"nanos":259123589},"http":{"id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4f0680-4d79-4f8b-8e3e-535fa56d840c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828a0923-61f0-475f-8918-eb50b699f91a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50926","PortSpecifier":{"PortValue":50926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"828a0923-61f0-475f-8918-eb50b699f91a","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828a0923-61f0-475f-8918-eb50b699f91a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50926","PortSpecifier":{"PortValue":50926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156399,"nanos":297815457},"http":{"id":"828a0923-61f0-475f-8918-eb50b699f91a","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"828a0923-61f0-475f-8918-eb50b699f91a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828a0923-61f0-475f-8918-eb50b699f91a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828a0923-61f0-475f-8918-eb50b699f91a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T22:59:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828a0923-61f0-475f-8918-eb50b699f91a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50930","PortSpecifier":{"PortValue":50930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9789c60-61c4-410f-aab1-56941ea4767b","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50930","PortSpecifier":{"PortValue":50930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156400,"nanos":334278422},"http":{"id":"f9789c60-61c4-410f-aab1-56941ea4767b","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T23:00:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9789c60-61c4-410f-aab1-56941ea4767b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50936","PortSpecifier":{"PortValue":50936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50936","PortSpecifier":{"PortValue":50936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156401,"nanos":368152432},"http":{"id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T23:00:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c8aff90-fb17-4aa6-a218-3a5f21b5ac87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a74298-d5c7-4645-9376-65a5952799be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50950","PortSpecifier":{"PortValue":50950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1a74298-d5c7-4645-9376-65a5952799be","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a74298-d5c7-4645-9376-65a5952799be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50950","PortSpecifier":{"PortValue":50950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156402,"nanos":422094436},"http":{"id":"a1a74298-d5c7-4645-9376-65a5952799be","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1a74298-d5c7-4645-9376-65a5952799be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a74298-d5c7-4645-9376-65a5952799be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a74298-d5c7-4645-9376-65a5952799be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T23:00:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a74298-d5c7-4645-9376-65a5952799be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25ff5cc-b529-423f-908f-05af8221d850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53042","PortSpecifier":{"PortValue":53042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c25ff5cc-b529-423f-908f-05af8221d850","method":"POST","path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions","host":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25ff5cc-b529-423f-908f-05af8221d850","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53042","PortSpecifier":{"PortValue":53042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156403,"nanos":469021449},"http":{"id":"c25ff5cc-b529-423f-908f-05af8221d850","method":"POST","headers":{":authority":"e2e-shared-a-d5b2a8.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yRTdrIM5k4s2F747_3OiL7rjsG8kZBeUD4wY3VdiQGcgbdTo6IKfu5fZC8mK\"}"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","subscription":"e2e-rate-iso-a-bd434e","tenant":"e2e-shared-a-d5b2a8","userId":"cf4fed60-6872-49d5-babb-e42ee93f4883","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\",\"requestedSubscription\":\"e2e-rate-iso-a-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d5b2a8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c25ff5cc-b529-423f-908f-05af8221d850","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d5b2a8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd434e"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25ff5cc-b529-423f-908f-05af8221d850","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf4fed60-6872-49d5-babb-e42ee93f4883","keyName":"e2e-rate-a-bd434e","selected_subscription":"e2e-rate-iso-a-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-a-d5b2a8/e2e-rate-iso-a-bd434e@ai-tenant-e2e-shared-a-d5b2a8/rate-test-model-d5b2a8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d5b2a8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd434e","namespace":"ai-tenant-e2e-shared-a-d5b2a8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25ff5cc-b529-423f-908f-05af8221d850","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25ff5cc-b529-423f-908f-05af8221d850","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","method":"POST","path":"/ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd/v1/completions","host":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784156403,"nanos":503715155},"http":{"id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","method":"POST","headers":{":authority":"e2e-shared-b-1e65bd.apps.716a9855-ce3b-44df-a103-4ba8263b6ee4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eBOhr6ded4MhZBNk_ieQy6WMcg8Gg54IBz69rwOpkt97XwOxOcQ40pq0zVmh"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eBOhr6ded4MhZBNk_ieQy6WMcg8Gg54IBz69rwOpkt97XwOxOcQ40pq0zVmh\"}"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ea0a059d-6ab7-44d3-bb93-bb122e2e5a3e","keyName":"e2e-rate-b-bd434e","subscription":"e2e-rate-iso-b-bd434e","tenant":"e2e-shared-b-1e65bd","userId":"ea0a059d-6ab7-44d3-bb93-bb122e2e5a3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd\",\"requestedSubscription\":\"e2e-rate-iso-b-bd434e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e65bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1e65bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd434e","namespace":"ai-tenant-e2e-shared-b-1e65bd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e65bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bd434e"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ea0a059d-6ab7-44d3-bb93-bb122e2e5a3e","keyName":"e2e-rate-b-bd434e","selected_subscription":"e2e-rate-iso-b-bd434e","selected_subscription_key":"ai-tenant-e2e-shared-b-1e65bd/e2e-rate-iso-b-bd434e@ai-tenant-e2e-shared-b-1e65bd/rate-test-model-1e65bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1e65bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd434e","namespace":"ai-tenant-e2e-shared-b-1e65bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T23:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25e04f3-e0b5-40c7-9408-af995325c1ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7d4229be7026ec77acf6b7c2ab16cc39cd05ea1901474bf6e5f76603e53a0fd"}
{"level":"info","ts":"2026-07-15T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4932a6d9e525a56170be5a940c0766ca321f1dac4bc583413ce4cc5e171f90cb"}
{"level":"info","ts":"2026-07-15T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51a412bad9ec56aa9727bbf52f5551ffda48de118837484ef1b0a6fa61040d38"}
{"level":"info","ts":"2026-07-15T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f64e7e89a0c0b193a02e0a692dfc0e9c4bb4bc8e5a2a4e79def1697d3baa5f1"}
{"level":"info","ts":"2026-07-15T23:00:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dae7f901817d9506f77927818bf6b20e4bde0e559aa8eb68086dd1e8c8704c5"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c12742a1c3457b0740ba03497bc30c449bcafc0ee1e7821864754d7983fb4bf"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb58d1975f49b6da2194bb411ecb1b2e795b8628082ebae267b2491ef2be5ec6"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29777dfcd72b5cee20d269d926e202f7672b48a37de2ba940d6623f8ed95826a"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0066deb97641d96fd72c35f7dd73780bd00a8a8d8962cd4c714fc08ac6445609"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b58484332816b823637df5806eb84c8f4d07774f82f54c583b5ab2fdfd5c5011"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed067d4856dde0f9d2d9919a347de4feb0b91a45cf69e92692bcb32b6dea71ea"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1a1bd4d343633b9b8bdca6404f7aac274ebf2701d6e2b020e6f8332be7a2a75"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a65fe552c83a1ae9fa4cfd8e33ce73f48fded3a830bc68c0c28d9db773e806d2"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2409624302163ee158449e057377ec8057c9a32aea85270ca9714659b753b0ce"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeb38f08b09940b4a17b6145866c3efcd22f9245c5cf1c995181d05b69bc2600"}
{"level":"info","ts":"2026-07-15T23:00:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d093c03655a47c40f9a8a3eb6c60389bf8a238755627cdd345036335ecf003a"}
{"level":"info","ts":"2026-07-15T23:00:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36087c57fcfbde556277c0152fd2b10e72bfd24df9886ff761dbdd1f0b23046c"}
{"level":"info","ts":"2026-07-15T23:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/124c0cd742d67d2983d24094b369566dd9ab6dee0fd390e23d5e5a697ff73575"}
{"level":"info","ts":"2026-07-15T23:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aebc2beea2b03bde903e5fbe56d46842bde79b41719783a555a8389fb1d7a4a"}
{"level":"info","ts":"2026-07-15T23:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a0d193fedf5717cff20e7a2db2407efb4be2690ececef0e2600f7d2237e6b8c"}
{"level":"info","ts":"2026-07-15T23:01:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8c12a8e22093cfd3cf27cb5513119adb61422dcf60747175c6fea49a97d385"}
{"level":"info","ts":"2026-07-15T23:01:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/445563c0fa513a6ba2af6c916c67a48b50884925bcdf2b97e55736b6b4bace02"}
{"level":"info","ts":"2026-07-15T23:01:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/901336f8fff544eb176808277134f325fe3b7f9da13d0000c7901107dbb1fd14"}
{"level":"info","ts":"2026-07-15T23:01:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97a6b65dbfcdd55b716af80d04f100bad9a7df8eabdc44471c71474f8ade262d"}