--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66b1d61a3a8352979cf1aee428a133567850e4c3a494905fac4b25ae2710f404","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66b1d61a3a8352979cf1aee428a133567850e4c3a494905fac4b25ae2710f404"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:10:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d"}
{"level":"info","ts":"2026-07-06T14:10:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"}
{"level":"info","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49548","PortSpecifier":{"PortValue":49548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"721d115a-59ec-4541-90dd-f8a0a99b1712","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49548","PortSpecifier":{"PortValue":49548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347018,"nanos":701393229},"http":{"id":"721d115a-59ec-4541-90dd-f8a0a99b1712","method":"POST","headers":{":authority":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a0277337970628910a3abc240f6dfc0f1376f7be7c51f7d4a5d7b4bd90f5300"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:10:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"721d115a-59ec-4541-90dd-f8a0a99b1712","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40652","PortSpecifier":{"PortValue":40652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","method":"POST","path":"/ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa/v1/chat/completions","host":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40652","PortSpecifier":{"PortValue":40652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347022,"nanos":769393103},"http":{"id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","method":"POST","headers":{":authority":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2HsUxeVRsaX3tRae_PQ27jppU37qNRkX5C9Tp18IwYpC1AlomFjpkI94mbln"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-23d6fa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2HsUxeVRsaX3tRae_PQ27jppU37qNRkX5C9Tp18IwYpC1AlomFjpkI94mbln\"}"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-23d6fa.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d270bfb4-2e8e-41d2-9312-bdc9e514f676","keyName":"e2e-tenant-inference-23d6fa","subscription":"test-model-23d6fa-sub","tenant":"e2e-inf-a-23d6fa","userId":"d270bfb4-2e8e-41d2-9312-bdc9e514f676","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-23d6fa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa\",\"requestedSubscription\":\"test-model-23d6fa-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-23d6fa.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-23d6fa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-23d6fa-sub","namespace":"ai-tenant-e2e-inf-a-23d6fa","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-23d6fa-sub"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d270bfb4-2e8e-41d2-9312-bdc9e514f676","keyName":"e2e-tenant-inference-23d6fa","selected_subscription":"test-model-23d6fa-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa-sub@ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-23d6fa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-23d6fa-sub","namespace":"ai-tenant-e2e-inf-a-23d6fa","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:10:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa50cc7-4aa8-4221-8e7a-0c282bdb1169","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40668","PortSpecifier":{"PortValue":40668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40668","PortSpecifier":{"PortValue":40668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347023,"nanos":73102741},"http":{"id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","method":"POST","headers":{":authority":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a0277337970628910a3abc240f6dfc0f1376f7be7c51f7d4a5d7b4bd90f5300"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-23d6fa.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-23d6fa/test-model-23d6fa\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0e6b4f6-2b9e-42a0-8b3c-0f40f584d3ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40030","PortSpecifier":{"PortValue":40030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","method":"POST","path":"/ai-tenant-e2e-inf-b-7e06f0/test-model-7e06f0/v1/chat/completions","host":"e2e-inf-b-7e06f0.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40030","PortSpecifier":{"PortValue":40030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347023,"nanos":113470630},"http":{"id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","method":"POST","headers":{":authority":"e2e-inf-b-7e06f0.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-7e06f0/test-model-7e06f0/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G3ueto6lQAWg6HYI_C26WKAF6x3YTEAOuwSIVjfskoo1guqvgunH84mVtz4Y"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-7e06f0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-G3ueto6lQAWg6HYI_C26WKAF6x3YTEAOuwSIVjfskoo1guqvgunH84mVtz4Y\"}"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-7e06f0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-7e06f0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-7e06f0.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-7e06f0/test-model-7e06f0/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:10:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da16c4fd-5d98-470e-b8cf-c6da3125dcaa","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd535a43d2825e40cd7d088948d1b35391cc60eebb4a3acda806921415836f8"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50fe75fea6ff3842d30c8c6ae0b760e154b2ac0be887fba28b0e6e4c01c7d302"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66b1d61a3a8352979cf1aee428a133567850e4c3a494905fac4b25ae2710f404"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d0d41f8cf6d287673e54b1001a3ba8b280226d799bc5bb6d7f9675ecdd77396"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01272ac44c776184a69592b1dcaa31df00c5207784dc44ef5b2a9b73ba80851d"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60bc74fcf867ff988c4ecb2ad339299f3cd5a212d8eaac5eece4ea18d90c4452"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a76a4d4da87adf2a1f785789e9ba35d565b5ea34fef9952b7ba52b067f3115f1"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c2d21f3443d2f2378620d2ba7fa15e2ba2345725afa02ecfdd3d751d9e5271f"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/063ccb9110da728306b99fbf118e3622d5a330f7bf7dc9d411724cefc225a274"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15fdd1d7e2387ab458ac651a4f8659b9848541186234c7ef3b6eaa600f4967ad"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d88e76a381b4281d112a39d5966344b7dc67a0183d9064c4605468ec33c7321"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f314939260fac4d2df0ab3ae10f676e754ae16d29fb65ca9726b1e433b2514ae"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c9df105d81d9f46fbe690e75f0a090019369ed0bd72a75aecbd4da77724bd7"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc494a9d7feb174bfad2c07698f0b34ef3ff705c23c1053b5d936ab42848b739"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d0a5644598787017f5868477809f19c9b6b9721f220bc4d1f018ec607d8179b"}
{"level":"info","ts":"2026-07-06T14:10:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/039eaafe1cb1e7cd7a98defd5ffaa7c5a5305bee791f9e46adb6b8c957b9b530"}
{"level":"info","ts":"2026-07-06T14:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a0277337970628910a3abc240f6dfc0f1376f7be7c51f7d4a5d7b4bd90f5300"}
{"level":"info","ts":"2026-07-06T14:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1029904bd87496a2d58afb6d33d4cae6e7b02f4f15cb6b74c1adec61c292c32"}
{"level":"info","ts":"2026-07-06T14:11:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac0770565df9228dfff57a1371de584ea2226a5b180a4ebfcd4e84acdb44628"}
{"level":"info","ts":"2026-07-06T14:11:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d1effa5330362ea26db4d75364fb7efed1af1cb39d1e5793a5cadfb662117d"}
{"level":"debug","ts":"2026-07-06T14:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:11:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:11:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"info","ts":"2026-07-06T14:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2825faf15e622c644be7b523fe793df4e622b1004496d3799582199023e7cb7"}
{"level":"info","ts":"2026-07-06T14:11:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0504873670cd99fd7c90046ec8ede96e09c3342166acbaf3a76a375b73d7ae2"}
{"level":"info","ts":"2026-07-06T14:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b5edd580be62d1e3d1f501bf0304f31b11b9fb279656d9c6a17a558f78216d8"}
{"level":"info","ts":"2026-07-06T14:11:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33ea77d51f4116d4c232839cc079b1653c11da5f61fe141898d973be518fe1fb"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"info","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1"}
{"level":"error","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb"}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347191,"nanos":437303659},"http":{"id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8ff7cd3-5966-4cb0-ae69-75e398730943","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33478","PortSpecifier":{"PortValue":33478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33478","PortSpecifier":{"PortValue":33478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347191,"nanos":499933948},"http":{"id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7ca6397-9ac6-4fc3-bdd9-24bc36dc923b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46600","PortSpecifier":{"PortValue":46600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","method":"GET","path":"/maas-api/v1/api-keys/5ccc53bd-d4a7-4d0a-a64f-6ccdc01b6249","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46600","PortSpecifier":{"PortValue":46600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347191,"nanos":592608047},"http":{"id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","method":"GET","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5ccc53bd-d4a7-4d0a-a64f-6ccdc01b6249",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5ccc53bd-d4a7-4d0a-a64f-6ccdc01b6249",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0389b148-f01f-46f5-816a-4e6c079bcd2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1556945c-17eb-4cb2-9993-976256573732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33486","PortSpecifier":{"PortValue":33486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1556945c-17eb-4cb2-9993-976256573732","method":"GET","path":"/maas-api/v1/api-keys/f765202d-49c6-4497-9486-0e452e83fbdf","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1556945c-17eb-4cb2-9993-976256573732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33486","PortSpecifier":{"PortValue":33486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347191,"nanos":630892356},"http":{"id":"1556945c-17eb-4cb2-9993-976256573732","method":"GET","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f765202d-49c6-4497-9486-0e452e83fbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1556945c-17eb-4cb2-9993-976256573732","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1556945c-17eb-4cb2-9993-976256573732","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f765202d-49c6-4497-9486-0e452e83fbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1556945c-17eb-4cb2-9993-976256573732","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1556945c-17eb-4cb2-9993-976256573732","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1556945c-17eb-4cb2-9993-976256573732","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43314","PortSpecifier":{"PortValue":43314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43314","PortSpecifier":{"PortValue":43314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347206,"nanos":657910797},"http":{"id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8c33f74-a9d3-4973-bbf3-98b7186598b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38672","PortSpecifier":{"PortValue":38672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3927e104-c0bc-416c-b189-520e8ddba5e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38672","PortSpecifier":{"PortValue":38672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347206,"nanos":700409843},"http":{"id":"3927e104-c0bc-416c-b189-520e8ddba5e8","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3927e104-c0bc-416c-b189-520e8ddba5e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347206,"nanos":748836913},"http":{"id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","method":"GET","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eQ04Yxh7E5JNKR9s_qDc2XrwGNAu6HtTqbRFjfqccYH7kPsQAyz6cd3TvsjN"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eQ04Yxh7E5JNKR9s_qDc2XrwGNAu6HtTqbRFjfqccYH7kPsQAyz6cd3TvsjN\"}"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01c3050b-c920-487a-9aaf-9bfbab0d17e2","keyName":"e2e-auth-iso-a-60e218","subscription":"e2e-auth-iso-e2e0e1","tenant":"e2e-shared-a-973328","userId":"01c3050b-c920-487a-9aaf-9bfbab0d17e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e2e0e1"}
{"level":"info","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6be48ce5-8563-4ecf-b872-2ce1f825d539","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49630","PortSpecifier":{"PortValue":49630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a4f079a-c3b3-4994-ae9e-fec935774681","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49630","PortSpecifier":{"PortValue":49630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347223,"nanos":942126169},"http":{"id":"8a4f079a-c3b3-4994-ae9e-fec935774681","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a4f079a-c3b3-4994-ae9e-fec935774681","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50568","PortSpecifier":{"PortValue":50568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50568","PortSpecifier":{"PortValue":50568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347223,"nanos":978568526},"http":{"id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e98532-f2aa-4c31-a415-7c6aa6b41766","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50570","PortSpecifier":{"PortValue":50570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50570","PortSpecifier":{"PortValue":50570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347224,"nanos":20560560},"http":{"id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","method":"GET","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m0568A1JrVk74y2B_IP47BnRdrEQbt2fGlTcKurADiumu4d3ATSHQd18aUSw"}
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-m0568A1JrVk74y2B_IP47BnRdrEQbt2fGlTcKurADiumu4d3ATSHQd18aUSw\"}"}
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e66b0fcc-150a-4cde-8e92-8e1eb9a719b6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57598","PortSpecifier":{"PortValue":57598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57598","PortSpecifier":{"PortValue":57598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347241,"nanos":237144106},"http":{"id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2a6b74-a8c4-4cf9-9e15-e1d89c0636e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33952","PortSpecifier":{"PortValue":33952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33952","PortSpecifier":{"PortValue":33952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347241,"nanos":275037324},"http":{"id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7789a47b-2b5e-4a12-88d2-a3a3ab2f11fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347241,"nanos":318564158},"http":{"id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48ed2cd2-6806-4a4c-82fa-3f6cbc080d34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33964","PortSpecifier":{"PortValue":33964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347241,"nanos":358393411},"http":{"id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0660a2d5-a63e-4b9e-a916-5e0b149081a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37218","PortSpecifier":{"PortValue":37218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37218","PortSpecifier":{"PortValue":37218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347256,"nanos":436282955},"http":{"id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e170ca5-9240-488c-872c-e3113ed8e7a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38490","PortSpecifier":{"PortValue":38490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3adf4680-3823-4b02-b83a-513c0041a26b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38490","PortSpecifier":{"PortValue":38490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347256,"nanos":476118072},"http":{"id":"3adf4680-3823-4b02-b83a-513c0041a26b","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3adf4680-3823-4b02-b83a-513c0041a26b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","method":"GET","path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347256,"nanos":515151349},"http":{"id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","method":"GET","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53dd46e2-0dd1-4fc7-a80f-522b71e42d99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcd64448-2b49-422d-946f-bdca0cc108f5","method":"GET","path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37224","PortSpecifier":{"PortValue":37224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347256,"nanos":550830204},"http":{"id":"fcd64448-2b49-422d-946f-bdca0cc108f5","method":"GET","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d447f24-7e31-4e0a-9fdf-8fc22da70f02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd64448-2b49-422d-946f-bdca0cc108f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55182","PortSpecifier":{"PortValue":55182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55182","PortSpecifier":{"PortValue":55182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347271,"nanos":708612368},"http":{"id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9208a20e-70d5-42a0-b3a7-2fa067ad06ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40788","PortSpecifier":{"PortValue":40788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40788","PortSpecifier":{"PortValue":40788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347271,"nanos":745463324},"http":{"id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/auth-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346344a1-11d9-4d15-8fc6-79faacbf4cbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23bb478b-6072-428a-804a-d85ab7188319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55194","PortSpecifier":{"PortValue":55194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23bb478b-6072-428a-804a-d85ab7188319","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23bb478b-6072-428a-804a-d85ab7188319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55194","PortSpecifier":{"PortValue":55194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347271,"nanos":785193280},"http":{"id":"23bb478b-6072-428a-804a-d85ab7188319","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1adO0Pn24dPSCPDDv_PL0crXn2sjLyXGxqt5G6ZWMUbrF6KXyeGevZYfEzTtu"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1adO0Pn24dPSCPDDv_PL0crXn2sjLyXGxqt5G6ZWMUbrF6KXyeGevZYfEzTtu\"}"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d99ea48b-0ae6-48ea-bd44-e338d475799d","keyName":"e2e-auth-iso-a-d11f55","subscription":"e2e-auth-iso-b2d98f","tenant":"e2e-shared-a-973328","userId":"d99ea48b-0ae6-48ea-bd44-e338d475799d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23bb478b-6072-428a-804a-d85ab7188319","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/auth-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b2d98f"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb478b-6072-428a-804a-d85ab7188319","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23bb478b-6072-428a-804a-d85ab7188319","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23bb478b-6072-428a-804a-d85ab7188319","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f99b5db82f5aa468db4477e72dd30c01de3ed35e6257220cecbd89fe9a5cd1b"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02470c302b5ae85c78a2474ceffff8db4f4054df3c9596c3a8cc07b04a6877c8"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e53f6a646a0d455fd3b42cfddce8b2af77d5c6fc8534fe755dc0ffd336013f2e"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c898d17a6eeda357102e02bb9bb9f9597e7a1d4a6eec9e657b197d5278e52e9"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/babf6db8ae8bc92792ec41e575406a5c7f75092ae7b04ab0f1887751a7af20f4"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436f296ead4b7eb639d065951a9fa6b11fa195286f9b462c5636aa97766ba7a7"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/209577364e1df1cf9a4a998ab1e4481110dd3f0a7dd9e67a8eabc168e94aed39"}
{"level":"info","ts":"2026-07-06T14:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/870455e07646b282a5d768a2dca3eaaa3dd5fcacc690007ecdb31f06e0af12ba"}
{"level":"info","ts":"2026-07-06T14:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9767e299b4943ab011df8670372e761bc593d7ee25cae034af0bd7b18eaff7a2"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30d1d6f5bffa295fe814aad2d169d4f0c3a683d35e00ea36f4967211b37b2ba4"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ae334414c30fa94075d2a6b786221eb61a6a0aa30bae3c22728904dae0eda"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfb444691039e82065444da7730ddf7beb007abe1fd62e9526c0eb38f18ab9c1"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec41748c08e22b8333b1c2351e6f6a3fee154975364874609c4ebc8e22e07dc1"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0683af707871de493a5578cb6e076ed4fef2b88260a616512b95dc75d39cef0c"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3d3fbc9e11225318ba11d51b5b214764e9c9a6376fa23b1ea16e3fdde5c007e"}
{"level":"info","ts":"2026-07-06T14:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5183525777cfbad327b3f2e095112e9d883a1049c8d670252cd93f113181cb"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0"}
{"level":"info","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"error","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"info","ts":"2026-07-06T14:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"}
{"level":"info","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"}
{"level":"info","ts":"2026-07-06T14:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"debug","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:15:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46362","PortSpecifier":{"PortValue":46362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46362","PortSpecifier":{"PortValue":46362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347332,"nanos":765800901},"http":{"id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/sub-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6a9f771-1be7-40ff-8331-684a379ee3c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53706","PortSpecifier":{"PortValue":53706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53706","PortSpecifier":{"PortValue":53706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347332,"nanos":808278973},"http":{"id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/sub-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad4a55e5-5305-92f0-a3c1-c8a800073615","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"973fafcd-7170-4e50-8fce-c621774782cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46370","PortSpecifier":{"PortValue":46370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"973fafcd-7170-4e50-8fce-c621774782cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"973fafcd-7170-4e50-8fce-c621774782cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46370","PortSpecifier":{"PortValue":46370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347332,"nanos":849281446},"http":{"id":"973fafcd-7170-4e50-8fce-c621774782cf","method":"GET","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8pWos8RywGPX1HVd_fFDh0lY0lMGyK3P9vubNwFfZVdCjuj6wGcEttD4adiD"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8pWos8RywGPX1HVd_fFDh0lY0lMGyK3P9vubNwFfZVdCjuj6wGcEttD4adiD\"}"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"007ea7bc-d738-4db1-ab17-cf803bd5771d","keyName":"e2e-sub-iso-ab0f1e","subscription":"e2e-a-only-e7fd1b","tenant":"e2e-shared-a-973328","userId":"007ea7bc-d738-4db1-ab17-cf803bd5771d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"973fafcd-7170-4e50-8fce-c621774782cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/sub-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e7fd1b"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"973fafcd-7170-4e50-8fce-c621774782cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"973fafcd-7170-4e50-8fce-c621774782cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"973fafcd-7170-4e50-8fce-c621774782cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347332,"nanos":890046003},"http":{"id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","method":"GET","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XpdLgNPuLrxyATS3_Sr4asfks3wi8CMPpm6QinIyEOQ0130tQ1lajQaCZ97y"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XpdLgNPuLrxyATS3_Sr4asfks3wi8CMPpm6QinIyEOQ0130tQ1lajQaCZ97y\"}"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a5ad457-271b-4ec1-823f-dbb17b80a96a","keyName":"e2e-sub-iso-070f37","subscription":"e2e-b-only-e7fd1b","tenant":"e2e-shared-b-35c041","userId":"8a5ad457-271b-4ec1-823f-dbb17b80a96a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/sub-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e7fd1b"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4136597-10a6-48b7-be5d-fd66b2ee48ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"639e062b-af1c-4d09-9d5d-360e4c71be27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34910","PortSpecifier":{"PortValue":34910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347349,"nanos":379338785},"http":{"id":"639e062b-af1c-4d09-9d5d-360e4c71be27","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/sub-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639e062b-af1c-4d09-9d5d-360e4c71be27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34770","PortSpecifier":{"PortValue":34770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34770","PortSpecifier":{"PortValue":34770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347349,"nanos":415372541},"http":{"id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/sub-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"270cccc6-f692-434e-8a79-cfd7fd70ec6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34918","PortSpecifier":{"PortValue":34918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34918","PortSpecifier":{"PortValue":34918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347349,"nanos":456570992},"http":{"id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GiuxxL3dylc77RhB_bidbF44M3U18m14DShlgkiV4RQuaPE8woI5jIrJIAkK"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GiuxxL3dylc77RhB_bidbF44M3U18m14DShlgkiV4RQuaPE8woI5jIrJIAkK\"}"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cdaa169e-dbfe-420f-a46a-59bf54c432c1","keyName":"e2e-sub-iso-b86296","subscription":"e2e-shared-sub-56f055","tenant":"e2e-shared-a-973328","userId":"cdaa169e-dbfe-420f-a46a-59bf54c432c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/sub-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-56f055"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d74e3ac-366b-465e-a12a-4199d08d9d3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34772","PortSpecifier":{"PortValue":34772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34772","PortSpecifier":{"PortValue":34772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347349,"nanos":487140373},"http":{"id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HnzwwnWuQaSBBIlL_cRH1h7QtJY2AOCiWsitBHcCqOlbRaHNEUzXTfJ0QPWp"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HnzwwnWuQaSBBIlL_cRH1h7QtJY2AOCiWsitBHcCqOlbRaHNEUzXTfJ0QPWp\"}"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1f99b8-14c8-47cf-81b9-6da3afc96464","keyName":"e2e-sub-iso-19d41b","subscription":"e2e-shared-sub-56f055","tenant":"e2e-shared-b-35c041","userId":"6c1f99b8-14c8-47cf-81b9-6da3afc96464","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/sub-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-56f055"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:15:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f0b5d1-886c-4e1c-842e-d2aa7f76eba4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b652f6e105760bded4ad468682d2610b9cca9eadead22cbe04974ca813f71a0"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3da556053bf08b40b36b61a3e87fdb88704dc1c2e35f02684a5efae4af0a1e38"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96d708c5c0f9205507697bdfc12c315543eacdc4aabd18e901e0812a05707364"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab91b88568c83dca8d19e4952ddb36bc5adb4035067cd09b67614830cbeb9806"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e9df5344c76b5d30d6609637b572a3e3b4310527a19ffbcfd0d33b780d0944"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a6d72a419190b0bc141828ee7f64fd6c0595456318b6c034bf194bd524f0804"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35a0eae395f6f9a4c04a7a5c30b08cb03adf3c0b00bc0e802804f7794429772f"}
{"level":"info","ts":"2026-07-06T14:15:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efba3bf90be180b4e8516281a0bd2f123d3e230a1dfc166bc20d6532b3faa6b"}
{"level":"info","ts":"2026-07-06T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeef3f67057bf1d285414fbdd37c502d30617165bb056eee88d04aaa15a64adb"}
{"level":"info","ts":"2026-07-06T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58dddc2678f4a10694c47e81a2e1a3989fd142f9bd37fb00e79686c200ee19e8"}
{"level":"info","ts":"2026-07-06T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5559c6da93bf418a197b5eb55ece280719098e80b489860d514a8d28e7dff8"}
{"level":"info","ts":"2026-07-06T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1b365aa02d9aba993a31ea99b3bc15024596a4755b8a126d580dc34125b19ef"}
{"level":"info","ts":"2026-07-06T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cdc39db998219848e952ca3364c6af07a2314c95ef6be3e32aa8caa625d224e"}
{"level":"info","ts":"2026-07-06T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f23bcf9eeb1141a14da4fff7bd33d5bc8922971dbd6b16c99edaf0d5e64b0123"}
{"level":"info","ts":"2026-07-06T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9d558d6414c8b8010df52974f7f78c4840e0730f0bfac701aadc28b02fe9a68"}
{"level":"info","ts":"2026-07-06T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd81e68781ec18c813c380424baceeda75974da15e126ee31a2ddb36a7e41726"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"error","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":540401185},"http":{"id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37192","PortSpecifier":{"PortValue":37192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37192","PortSpecifier":{"PortValue":37192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":587425131},"http":{"id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41480","PortSpecifier":{"PortValue":41480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41480","PortSpecifier":{"PortValue":41480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":635294242},"http":{"id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecddc5f6-530f-4007-839c-468fc8442b4e","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347467,"nanos":702692040},"http":{"id":"ecddc5f6-530f-4007-839c-468fc8442b4e","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99e1007-299d-4a2a-b80e-937198fc503b","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347468,"nanos":745201857},"http":{"id":"c99e1007-299d-4a2a-b80e-937198fc503b","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569610a-b748-434c-9f61-ad005edee4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35460","PortSpecifier":{"PortValue":35460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d569610a-b748-434c-9f61-ad005edee4ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569610a-b748-434c-9f61-ad005edee4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35460","PortSpecifier":{"PortValue":35460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":512352284},"http":{"id":"d569610a-b748-434c-9f61-ad005edee4ca","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d569610a-b748-434c-9f61-ad005edee4ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d569610a-b748-434c-9f61-ad005edee4ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e890a2a8-496f-4e9d-8810-beb2398adb15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":553678983},"http":{"id":"e890a2a8-496f-4e9d-8810-beb2398adb15","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6351181e-a454-4a20-95ed-f7cd98be66d9","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":594511495},"http":{"id":"6351181e-a454-4a20-95ed-f7cd98be66d9","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347480,"nanos":633661393},"http":{"id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347481,"nanos":674198808},"http":{"id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"202d34e1-70fa-464f-8c60-25bb35d25334","method":"POST","path":"/ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041/v1/completions","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347481,"nanos":709161244},"http":{"id":"202d34e1-70fa-464f-8c60-25bb35d25334","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FVU4uJ4mI42EhP1w_AjKoihx1Gw14XBNgJvWfg9EBLqDq0Y2WsWKQZ4mUpGM"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FVU4uJ4mI42EhP1w_AjKoihx1Gw14XBNgJvWfg9EBLqDq0Y2WsWKQZ4mUpGM\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1d256c1-e33d-467a-80dc-8719625f7054","keyName":"e2e-rate-b-8d2f32","subscription":"e2e-rate-iso-b-8d2f32","tenant":"e2e-shared-b-35c041","userId":"a1d256c1-e33d-467a-80dc-8719625f7054","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\",\"requestedSubscription\":\"e2e-rate-iso-b-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-35c041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8d2f32","namespace":"ai-tenant-e2e-shared-b-35c041","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1d256c1-e33d-467a-80dc-8719625f7054","keyName":"e2e-rate-b-8d2f32","selected_subscription":"e2e-rate-iso-b-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-b-35c041/e2e-rate-iso-b-8d2f32@ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-35c041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8d2f32","namespace":"ai-tenant-e2e-shared-b-35c041","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"info","ts":"2026-07-06T14:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}