--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"error","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"error","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"debug","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6"}
{"level":"info","ts":"2026-07-06T16:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:05:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:05:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41044","PortSpecifier":{"PortValue":41044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41044","PortSpecifier":{"PortValue":41044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353911,"nanos":497737025},"http":{"id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae6f225-6739-42a8-ad2f-83c7543bb5da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59534","PortSpecifier":{"PortValue":59534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59534","PortSpecifier":{"PortValue":59534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353911,"nanos":559390341},"http":{"id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc3e89a-403c-4dfc-acc8-718d7d702ba7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41048","PortSpecifier":{"PortValue":41048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c065c990-01f5-41df-9440-f2d4181ffdca","method":"GET","path":"/maas-api/v1/api-keys/38373476-08e3-40ec-a2c7-f0d66c872f6e","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41048","PortSpecifier":{"PortValue":41048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353911,"nanos":650404125},"http":{"id":"c065c990-01f5-41df-9440-f2d4181ffdca","method":"GET","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/38373476-08e3-40ec-a2c7-f0d66c872f6e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/38373476-08e3-40ec-a2c7-f0d66c872f6e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c065c990-01f5-41df-9440-f2d4181ffdca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59536","PortSpecifier":{"PortValue":59536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66859dfb-0586-4056-94f1-8a5299bbffd0","method":"GET","path":"/maas-api/v1/api-keys/7ef76629-b0e9-4ad6-835c-0781fd8f4b5c","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59536","PortSpecifier":{"PortValue":59536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353911,"nanos":688196891},"http":{"id":"66859dfb-0586-4056-94f1-8a5299bbffd0","method":"GET","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ef76629-b0e9-4ad6-835c-0781fd8f4b5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ef76629-b0e9-4ad6-835c-0781fd8f4b5c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66859dfb-0586-4056-94f1-8a5299bbffd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56454","PortSpecifier":{"PortValue":56454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56454","PortSpecifier":{"PortValue":56454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353926,"nanos":696165207},"http":{"id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dbe1a10-45d3-4fc2-b1b3-a187c8b0b03d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59020","PortSpecifier":{"PortValue":59020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa86ce43-4c88-4dde-8316-f9779da84475","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59020","PortSpecifier":{"PortValue":59020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353926,"nanos":748248827},"http":{"id":"aa86ce43-4c88-4dde-8316-f9779da84475","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa86ce43-4c88-4dde-8316-f9779da84475","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56466","PortSpecifier":{"PortValue":56466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56466","PortSpecifier":{"PortValue":56466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353926,"nanos":792560409},"http":{"id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","method":"GET","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xtc4qYQXCQ6QU7eI_bukO9eqa0bick2OxtvUdjr79ocJhIJPdiSICDmXP306"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xtc4qYQXCQ6QU7eI_bukO9eqa0bick2OxtvUdjr79ocJhIJPdiSICDmXP306\"}"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0961e070-d0a5-4553-9a01-6cf1e2eef342","keyName":"e2e-auth-iso-a-c34440","subscription":"e2e-auth-iso-9e9b95","tenant":"e2e-shared-a-b75322","userId":"0961e070-d0a5-4553-9a01-6cf1e2eef342","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9e9b95"}
{"level":"info","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f82d3ec7-b8a1-4371-ae23-a354eae32752","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74db2683-97f2-414b-9f37-dd195f3e7dde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353949,"nanos":788399185},"http":{"id":"74db2683-97f2-414b-9f37-dd195f3e7dde","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74db2683-97f2-414b-9f37-dd195f3e7dde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14150c40-162b-4711-a2f4-0ff6d57803d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51320","PortSpecifier":{"PortValue":51320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353949,"nanos":829620713},"http":{"id":"14150c40-162b-4711-a2f4-0ff6d57803d9","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14150c40-162b-4711-a2f4-0ff6d57803d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ee55587-ae70-43f2-a4e1-b65109482a29","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353949,"nanos":866708194},"http":{"id":"1ee55587-ae70-43f2-a4e1-b65109482a29","method":"GET","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jGFdhjOWLcalbMXP_Dhw9sZyfcddTEcWl1lDdzo0r2bodTo4yiKK8e4NK64F"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jGFdhjOWLcalbMXP_Dhw9sZyfcddTEcWl1lDdzo0r2bodTo4yiKK8e4NK64F\"}"}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T16:05:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee55587-ae70-43f2-a4e1-b65109482a29","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40866","PortSpecifier":{"PortValue":40866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40866","PortSpecifier":{"PortValue":40866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353967,"nanos":783453619},"http":{"id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76d2ec18-000b-4e5d-81ea-c84ff0c71f6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50490","PortSpecifier":{"PortValue":50490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50490","PortSpecifier":{"PortValue":50490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353967,"nanos":820771056},"http":{"id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f09e7d4b-ab53-4119-b52c-c3ea6d48419b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40872","PortSpecifier":{"PortValue":40872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b0da67-0e2e-4263-b952-07c68c329c75","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40872","PortSpecifier":{"PortValue":40872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353967,"nanos":861183989},"http":{"id":"c1b0da67-0e2e-4263-b952-07c68c329c75","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b0da67-0e2e-4263-b952-07c68c329c75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50502","PortSpecifier":{"PortValue":50502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50502","PortSpecifier":{"PortValue":50502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353967,"nanos":899174242},"http":{"id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd5ee530-1904-4ef4-a6d6-6c6e8bd3dd77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58352","PortSpecifier":{"PortValue":58352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58352","PortSpecifier":{"PortValue":58352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353985,"nanos":44483285},"http":{"id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b9dab0-3b48-4fc2-882f-03820b0c624a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57648","PortSpecifier":{"PortValue":57648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57648","PortSpecifier":{"PortValue":57648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353985,"nanos":83552960},"http":{"id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8c5569-1d68-4d5e-9a94-50aa062b32e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57652","PortSpecifier":{"PortValue":57652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","method":"GET","path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57652","PortSpecifier":{"PortValue":57652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353985,"nanos":122004509},"http":{"id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","method":"GET","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb89a08-05c2-43a6-9380-acb0bffdbdee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58368","PortSpecifier":{"PortValue":58368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d89288dc-3c5b-4500-bb53-49048b49f02e","method":"GET","path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58368","PortSpecifier":{"PortValue":58368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353985,"nanos":157090077},"http":{"id":"d89288dc-3c5b-4500-bb53-49048b49f02e","method":"GET","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b18210b6-6c18-4a50-a020-8a3e2278f03a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d89288dc-3c5b-4500-bb53-49048b49f02e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53306","PortSpecifier":{"PortValue":53306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53306","PortSpecifier":{"PortValue":53306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353998,"nanos":96703744},"http":{"id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce54158b-c02d-4ddf-a2ab-096812f3fd13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39768","PortSpecifier":{"PortValue":39768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39768","PortSpecifier":{"PortValue":39768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353998,"nanos":142135673},"http":{"id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/auth-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18cb0644-8d5e-45e1-829f-20bdb2fb168d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53312","PortSpecifier":{"PortValue":53312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53312","PortSpecifier":{"PortValue":53312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783353998,"nanos":179735238},"http":{"id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-N21XNPppmttdKyni_htRDOubFgN4sc0FbgqCpBwuGXhe0foRh5oJlLaYDd4v"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-N21XNPppmttdKyni_htRDOubFgN4sc0FbgqCpBwuGXhe0foRh5oJlLaYDd4v\"}"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fcf9239d-75fe-4afe-bcc3-5557727749dc","keyName":"e2e-auth-iso-a-c0a000","subscription":"e2e-auth-iso-65fe75","tenant":"e2e-shared-a-b75322","userId":"fcf9239d-75fe-4afe-bcc3-5557727749dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/auth-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-65fe75"}
{"level":"info","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:06:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df8dbc31-f79a-4b9c-94f1-1c5d1ca08557","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43e166db4d3a82b7c4321728e1f60fa70a1f4fda4d18eba61f4cf83cf805eee4"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59d39e93a9527b51624a8c111e7bb6a9f46c4049cfd20621b93072306bccfc6"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59533f14742ed892fd6ecc559ea36644ba6334e28830e4f31896d4955ccf07ec"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52c8e03f6902703cfab64cd7e7867fb5fd91acd353c93820a531877df05b48c"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc93a044556b690923f25ebb90e7dcc845e68597d62b6f7fe11ea5b2195dbdb"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7017265e03144088154955d26a8ab643b5fa9adfabf3071b238481b5cebaed"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab46ea9e1d535c4866ba3bdb0cfccb811ece41196d2a85141df8cd4646d3d6e"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b73b5b0c4d194ce727469ea819c6620e2451683d79cb5bcad2792e26318315e"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa9e7c9ef37edf168e5e989de82b6369f0d05f14a45467610952bdcacecff934"}
{"level":"info","ts":"2026-07-06T16:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9a98217bf2c9f32e8bc33ff82d93620563f6cc4f9f69df9244ab55352ffa326"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8178b7ce1a870cfe17c8532abe6d6d8defbe5b6829bea2ac4600fc3f9595b5d8"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc77fd888f51839eda9d37c0253e2b2eda395835e558bb7b2031b1dee5535c8"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5c437f9beacdad309e59ea08db47de32bdc9f3ff5eb940c2cc331281e054df0"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03ba2dbc1877026b5fabd6b20be9fd2bb35b6bf36831e8d1f17099240eda8d43"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e196bb1ee1dffca0938ac221339bb73aa4fd771438afc2f361404ad48d0df23b"}
{"level":"info","ts":"2026-07-06T16:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/801a5c7f29f7fccc134eeda78befca1769b660f0f08302ed8c847a6ce8cc724a"}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:06:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"error","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"error","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"debug","ts":"2026-07-06T16:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7dda140802f7dc5718e9ca407b36c08c18d5f5bce257b77d290a0801aebd93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7dda140802f7dc5718e9ca407b36c08c18d5f5bce257b77d290a0801aebd93"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"info","ts":"2026-07-06T16:07:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:07:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"}
{"level":"error","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"debug","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a"}
{"level":"info","ts":"2026-07-06T16:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44776","PortSpecifier":{"PortValue":44776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44776","PortSpecifier":{"PortValue":44776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354072,"nanos":239249601},"http":{"id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/sub-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a42f8e-7aac-4786-bf6d-27bebfb71e8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43926","PortSpecifier":{"PortValue":43926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352f766e-1d10-4e29-aa8d-73d2047a0838","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43926","PortSpecifier":{"PortValue":43926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354072,"nanos":289510206},"http":{"id":"352f766e-1d10-4e29-aa8d-73d2047a0838","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/sub-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352f766e-1d10-4e29-aa8d-73d2047a0838","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb9da569-dfa6-442d-ae49-709444fd490a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354072,"nanos":335955161},"http":{"id":"fb9da569-dfa6-442d-ae49-709444fd490a","method":"GET","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RdpemjbprOAgZRSA_aaompO6I06Fk5OiG1XdfaIuPrVbQbevUNPbe12V8cF2"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RdpemjbprOAgZRSA_aaompO6I06Fk5OiG1XdfaIuPrVbQbevUNPbe12V8cF2\"}"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60328f4f-9c9b-4eda-a4ae-828d391aa6fa","keyName":"e2e-sub-iso-5e2102","subscription":"e2e-a-only-00ba2d","tenant":"e2e-shared-a-b75322","userId":"60328f4f-9c9b-4eda-a4ae-828d391aa6fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/sub-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-00ba2d"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9da569-dfa6-442d-ae49-709444fd490a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43934","PortSpecifier":{"PortValue":43934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43934","PortSpecifier":{"PortValue":43934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354072,"nanos":389125956},"http":{"id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","method":"GET","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-224oIsCBdTrt6l1E_gPzygRtb8NbyK7LrssObbLGxI3S5u40fbkZcw79EFmr"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-224oIsCBdTrt6l1E_gPzygRtb8NbyK7LrssObbLGxI3S5u40fbkZcw79EFmr\"}"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb569899-4270-4c52-9060-2a2a2381e33f","keyName":"e2e-sub-iso-381649","subscription":"e2e-b-only-00ba2d","tenant":"e2e-shared-b-690f40","userId":"cb569899-4270-4c52-9060-2a2a2381e33f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/sub-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-00ba2d"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a7759db-11d7-4bdc-8e74-e05b1faa1bd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39750","PortSpecifier":{"PortValue":39750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"794eec76-9cab-4213-8efa-7c1ab58d844a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39750","PortSpecifier":{"PortValue":39750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354082,"nanos":747892262},"http":{"id":"794eec76-9cab-4213-8efa-7c1ab58d844a","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/sub-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"794eec76-9cab-4213-8efa-7c1ab58d844a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42648","PortSpecifier":{"PortValue":42648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42648","PortSpecifier":{"PortValue":42648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354082,"nanos":792291792},"http":{"id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/sub-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b54a73b-b24d-45a1-92fb-6c32f9e3fcb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39758","PortSpecifier":{"PortValue":39758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39758","PortSpecifier":{"PortValue":39758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354082,"nanos":851457804},"http":{"id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KmN1uUM901Luk2Fd_8R8bbTe0FdMf3SbLBy6JnLBbpf9SmTPg7oskHjGaiLA"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KmN1uUM901Luk2Fd_8R8bbTe0FdMf3SbLBy6JnLBbpf9SmTPg7oskHjGaiLA\"}"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23264f57-b56c-4710-81c8-29c0b4ce44d5","keyName":"e2e-sub-iso-75b812","subscription":"e2e-shared-sub-751246","tenant":"e2e-shared-a-b75322","userId":"23264f57-b56c-4710-81c8-29c0b4ce44d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/sub-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-751246"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32ac5d80-65cc-4db6-9f9b-d4ff0ea7d9fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354082,"nanos":902555612},"http":{"id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q1a3tez8m04ly3c6_Wa69rzVuhntpHgvthJeFcsJP53I8BOS4KWY1SpZLdUM"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q1a3tez8m04ly3c6_Wa69rzVuhntpHgvthJeFcsJP53I8BOS4KWY1SpZLdUM\"}"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7257a78b-55f2-49fb-9238-51cacb7b1508","keyName":"e2e-sub-iso-36b5ae","subscription":"e2e-shared-sub-751246","tenant":"e2e-shared-b-690f40","userId":"7257a78b-55f2-49fb-9238-51cacb7b1508","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/sub-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-751246"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2588e19b-b3e8-4643-a3fa-48d9196b1df4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/665879b1d40e9893a9cbd6cea00ce7e1d3bcda610092105521b10442855305f9"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34fef86b902dfeaa151110957c63fee3c2e1cb6bfbbf60f81a67fc41a91252d8"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c99a2659675f89e69dfc259ba1d897055870048ce83e4bf7f150a956f7a68e89"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/030bb8df0ca143b10ff568335c18ac68121dbef21fbad531d83861ff945d5fc3"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04ba5e5a10b75255ddfc37696563bcb54d4a46509c959f6b1771bc6bc3e7c95b"}
{"level":"info","ts":"2026-07-06T16:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71c0cd9cc6b6411d5f99c0bbc6b640302054356ab935da6cb8c2464454144fe1"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8ac5cf713fc59a1c2a15e4509538f3a90220dd31e7106aebf40195582ee64f6"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d58eefd5e8abb4e83ec375dd2a570a97cbb78182e075feb4212c7ead9fabff6"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bea94e8d1c7bfb941264132afbad9e65f38a1eda4ce94fb9520de7860b3a741e"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbac3a3308b1ee8fdf28bbaf05821ba44bd18e6f2062bd42898f540875bd3ad9"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a98aa235314fce7e0c8eb3c8677a461272efb33aed3aacd4cca86989b4833cb"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c054344348b87313819e15a79f9ede2c9193aafef21f4cf3a17677e6424240b2"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/268f762b31dbba8540a86f7d13cb0ee8ea5877738bd68cb64e33b2365f06860a"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7c5eb5143f1ad0da4f3463ecaa68ba425588b7f6cbbea7485dcabd11ae41623"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/346c1b455e0a4367c2b40ba2a39561465fe5d5f2f78b9c358a1459d2e3b43f32"}
{"level":"info","ts":"2026-07-06T16:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfc63bcb1d351bc04df174e5912a7ac7dcabf86049ba3a68c2cbaca44bbf92f"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"error","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"debug","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"info","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8"}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"}
{"level":"info","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"error","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7dda140802f7dc5718e9ca407b36c08c18d5f5bce257b77d290a0801aebd93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T16:09:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7dda140802f7dc5718e9ca407b36c08c18d5f5bce257b77d290a0801aebd93"}
{"level":"error","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"debug","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8"}
{"level":"info","ts":"2026-07-06T16:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60518","PortSpecifier":{"PortValue":60518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6e24368-6780-4d84-83eb-1c60c8453b80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60518","PortSpecifier":{"PortValue":60518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354159,"nanos":92404293},"http":{"id":"c6e24368-6780-4d84-83eb-1c60c8453b80","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6e24368-6780-4d84-83eb-1c60c8453b80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52300","PortSpecifier":{"PortValue":52300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52300","PortSpecifier":{"PortValue":52300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354159,"nanos":137204284},"http":{"id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bf89534-7b2f-4823-bf9b-683c08ce5fb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60520","PortSpecifier":{"PortValue":60520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60520","PortSpecifier":{"PortValue":60520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354159,"nanos":184556680},"http":{"id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3\"}"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","subscription":"e2e-rate-iso-a-8968d8","tenant":"e2e-shared-a-b75322","userId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-8968d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8968d8"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","selected_subscription":"e2e-rate-iso-a-8968d8","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-8968d8@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca719677-2af1-42d2-b634-4c39f94a8b7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045d73d1-488f-4492-8f60-aed692241c95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60532","PortSpecifier":{"PortValue":60532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"045d73d1-488f-4492-8f60-aed692241c95","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045d73d1-488f-4492-8f60-aed692241c95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60532","PortSpecifier":{"PortValue":60532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354160,"nanos":250195541},"http":{"id":"045d73d1-488f-4492-8f60-aed692241c95","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3\"}"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","subscription":"e2e-rate-iso-a-8968d8","tenant":"e2e-shared-a-b75322","userId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-8968d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"045d73d1-488f-4492-8f60-aed692241c95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8968d8"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045d73d1-488f-4492-8f60-aed692241c95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","selected_subscription":"e2e-rate-iso-a-8968d8","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-8968d8@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045d73d1-488f-4492-8f60-aed692241c95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045d73d1-488f-4492-8f60-aed692241c95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60536","PortSpecifier":{"PortValue":60536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60536","PortSpecifier":{"PortValue":60536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354161,"nanos":320750527},"http":{"id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E40beNaMSPNNGzo4_a0t5syDkCgKRBXnV7YHXmffxqNoRyK1KJgeGCHhRJe3\"}"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","subscription":"e2e-rate-iso-a-8968d8","tenant":"e2e-shared-a-b75322","userId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-8968d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8968d8"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"81e2c33d-3f4f-4f41-ae05-ad01f7268d50","keyName":"e2e-rate-a-8968d8","selected_subscription":"e2e-rate-iso-a-8968d8","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-8968d8@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8968d8","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155addaa-6f6d-4f2f-87c3-c093ba57ee89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42992","PortSpecifier":{"PortValue":42992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42992","PortSpecifier":{"PortValue":42992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354168,"nanos":64944631},"http":{"id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e37b8abe-d3b0-40e7-88b7-e4f7c4a6164b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43434","PortSpecifier":{"PortValue":43434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb234747-745c-4e88-89de-60ebfb6e236a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43434","PortSpecifier":{"PortValue":43434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354168,"nanos":105453128},"http":{"id":"cb234747-745c-4e88-89de-60ebfb6e236a","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"]}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/723256ad2427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3d92cce3-f82d-4ee7-beb8-8ee79c43988c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"26fb2a9a-364e-4449-b65b-3419e8203e5c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb234747-745c-4e88-89de-60ebfb6e236a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43008","PortSpecifier":{"PortValue":43008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43008","PortSpecifier":{"PortValue":43008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354168,"nanos":145062438},"http":{"id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a85ad-85ba-48c6-90c2-9f0ecc4b0458","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354169,"nanos":183583224},"http":{"id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af7f2e3-73b5-4fe6-b484-fa6ea9b1a4f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00511b89-de6d-4218-bd33-10965a96dba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43018","PortSpecifier":{"PortValue":43018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00511b89-de6d-4218-bd33-10965a96dba9","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00511b89-de6d-4218-bd33-10965a96dba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43018","PortSpecifier":{"PortValue":43018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354170,"nanos":222812317},"http":{"id":"00511b89-de6d-4218-bd33-10965a96dba9","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00511b89-de6d-4218-bd33-10965a96dba9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00511b89-de6d-4218-bd33-10965a96dba9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00511b89-de6d-4218-bd33-10965a96dba9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00511b89-de6d-4218-bd33-10965a96dba9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43024","PortSpecifier":{"PortValue":43024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43024","PortSpecifier":{"PortValue":43024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354171,"nanos":262132781},"http":{"id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85093b00-8e2f-4cbc-9de0-bd8c422b555d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29698b5a-e69b-4582-a09a-c580d396f568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43032","PortSpecifier":{"PortValue":43032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29698b5a-e69b-4582-a09a-c580d396f568","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29698b5a-e69b-4582-a09a-c580d396f568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43032","PortSpecifier":{"PortValue":43032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354172,"nanos":300364608},"http":{"id":"29698b5a-e69b-4582-a09a-c580d396f568","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29698b5a-e69b-4582-a09a-c580d396f568","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29698b5a-e69b-4582-a09a-c580d396f568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29698b5a-e69b-4582-a09a-c580d396f568","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29698b5a-e69b-4582-a09a-c580d396f568","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43042","PortSpecifier":{"PortValue":43042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43042","PortSpecifier":{"PortValue":43042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354173,"nanos":338294093},"http":{"id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62f4bd11-7fef-4f21-a054-4d6f0c2528b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43052","PortSpecifier":{"PortValue":43052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43052","PortSpecifier":{"PortValue":43052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354174,"nanos":377197197},"http":{"id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e65d980-045c-4fec-b955-25a25fcf1bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43068","PortSpecifier":{"PortValue":43068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ccfb48a-833c-409c-9250-7b415fff84eb","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43068","PortSpecifier":{"PortValue":43068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354175,"nanos":412550958},"http":{"id":"2ccfb48a-833c-409c-9250-7b415fff84eb","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccfb48a-833c-409c-9250-7b415fff84eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43084","PortSpecifier":{"PortValue":43084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43084","PortSpecifier":{"PortValue":43084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354176,"nanos":452788192},"http":{"id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87e4d86-4a25-4bbb-8ff8-cf826d2c2542","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57698","PortSpecifier":{"PortValue":57698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57698","PortSpecifier":{"PortValue":57698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354177,"nanos":491578325},"http":{"id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5865a7c9-8e9a-4c62-b668-b43628af8a4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57706","PortSpecifier":{"PortValue":57706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a930bcc-9316-4467-a044-c2e381b5a252","method":"POST","path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions","host":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57706","PortSpecifier":{"PortValue":57706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354178,"nanos":534800357},"http":{"id":"1a930bcc-9316-4467-a044-c2e381b5a252","method":"POST","headers":{":authority":"e2e-shared-a-b75322.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZcHcuNaN1BUIMK4P_AIqqIbwWkpEmyJjGil6KtCkZ2Nkgz0y5aDk6u2bOLv1\"}"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","subscription":"e2e-rate-iso-a-ec722e","tenant":"e2e-shared-a-b75322","userId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\",\"requestedSubscription\":\"e2e-rate-iso-a-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b75322.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25eb8c1c-0000-4adf-a6ef-43de3d44a620","keyName":"e2e-rate-a-ec722e","selected_subscription":"e2e-rate-iso-a-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-a-b75322/e2e-rate-iso-a-ec722e@ai-tenant-e2e-shared-a-b75322/rate-test-model-b75322","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b75322","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ec722e","namespace":"ai-tenant-e2e-shared-a-b75322","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a930bcc-9316-4467-a044-c2e381b5a252","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","method":"POST","path":"/ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40/v1/completions","host":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783354178,"nanos":572786336},"http":{"id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","method":"POST","headers":{":authority":"e2e-shared-b-690f40.apps.e37760d6-8ead-421e-9a75-723256ad2427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Z4qSLKfZQwdiCxJG_LrOJkvdHgZsyQ1pjxnvYMDW19UnJwa9Ew1nRLaMEimP"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Z4qSLKfZQwdiCxJG_LrOJkvdHgZsyQ1pjxnvYMDW19UnJwa9Ew1nRLaMEimP\"}"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"791eaf1a-1009-45f4-8009-e349c27c6605","keyName":"e2e-rate-b-ec722e","subscription":"e2e-rate-iso-b-ec722e","tenant":"e2e-shared-b-690f40","userId":"791eaf1a-1009-45f4-8009-e349c27c6605","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40\",\"requestedSubscription\":\"e2e-rate-iso-b-ec722e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-690f40.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-690f40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ec722e","namespace":"ai-tenant-e2e-shared-b-690f40","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ec722e"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"791eaf1a-1009-45f4-8009-e349c27c6605","keyName":"e2e-rate-b-ec722e","selected_subscription":"e2e-rate-iso-b-ec722e","selected_subscription_key":"ai-tenant-e2e-shared-b-690f40/e2e-rate-iso-b-ec722e@ai-tenant-e2e-shared-b-690f40/rate-test-model-690f40","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-690f40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ec722e","namespace":"ai-tenant-e2e-shared-b-690f40","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T16:09:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df2c1e8-4686-43bd-aa0f-c42859cdd792","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3721c2aa094b3db2df9ca8ca356ecf37206ed780bb5e7bcf6103728626f3bd98"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50ece9a54142130eeac3adf7dab7e4fa8309ade9a3839068166ee7b3430370c9"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd33cdfcbe12d8f54549657dbf4abd2f6fc6eac7d81cd82bcca67db0db43839"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a833cb032bb9a432ffb9577ca47e20bb1a1e1288c9d1c6b4edab537aca6c620"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3914d916f6056f15446dd5ad7dba76519085f6670e81a17d1d0899292348ceef"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e93bfd7ec2dabb4a00a500c717868992fe82c99855db313135c16014176499d"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/854d5da65e060ea90eae33492541e47cf059898c68cefaf0ffe2617da10a1811"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a641d5eb15e1c8d506bff8379b2ecc5d2039c2854f0c4c1d04ba766b7bd0e8b8"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37badf24d083dbff6d6759dc7f3a5d242304b6206edc913fc1ee3b20e3697d7b"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d99709c3698ba33669003de20a0c8bce4dd946a31d20af2ac7f53facf2559622"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec170e263c73e774d5303186c6ae404446498924ebed194642f6111089525891"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f71989698e93e5ecb09641e4f617b38dffd5e866c42b2b4833ac4686b7f73669"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396d88a359e2b86378665af0145ca852b5f7b1e455ec9fc490f5ae40bfcc6cad"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7906e60e43189867c8724da92efa20e1d0aafd34c961df01c2c54962f2862a4e"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa33a68fb002b6ecb20e204c0de4f522488febdf6860c083f71436bc486da94c"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7dda140802f7dc5718e9ca407b36c08c18d5f5bce257b77d290a0801aebd93"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c819a1c63f1ae5fbc79d44812f60761fa9ebb46ce6c9455279c4bd48626046"}
{"level":"info","ts":"2026-07-06T16:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23a8d33acfed182d9d896cb8d37f48bdcf76ee2ebd1fabc1456bc910aa0e487d"}
{"level":"info","ts":"2026-07-06T16:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7028a6c2777401221a0b3b145035f51e125d5fc1f5882ce3322baac567f937ac"}
{"level":"info","ts":"2026-07-06T16:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be5ff884cede7dd2aad562df32954e0f7a58058a3d84e0ba7a37367ca17a3d58"}