--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"}
{"level":"info","ts":"2026-07-13T22:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56342","PortSpecifier":{"PortValue":56342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56342","PortSpecifier":{"PortValue":56342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980110,"nanos":867600647},"http":{"id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a542f39b-7aa8-4cd8-94b0-079f44bd3cd9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46692","PortSpecifier":{"PortValue":46692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46692","PortSpecifier":{"PortValue":46692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980110,"nanos":926947564},"http":{"id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eee8e41-e4e2-464a-9c26-cd9cc8d16767","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56346","PortSpecifier":{"PortValue":56346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86af9698-c9dd-4829-bbdb-b26736177dc9","method":"GET","path":"/maas-api/v1/api-keys/a220fd03-651f-47ca-b815-6e8552700a7c","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56346","PortSpecifier":{"PortValue":56346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980110,"nanos":983094001},"http":{"id":"86af9698-c9dd-4829-bbdb-b26736177dc9","method":"GET","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a220fd03-651f-47ca-b815-6e8552700a7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a220fd03-651f-47ca-b815-6e8552700a7c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:01:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86af9698-c9dd-4829-bbdb-b26736177dc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46696","PortSpecifier":{"PortValue":46696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","method":"GET","path":"/maas-api/v1/api-keys/e66652af-69c5-4f66-bdda-e1a768cbf5ac","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46696","PortSpecifier":{"PortValue":46696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980111,"nanos":14688797},"http":{"id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","method":"GET","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e66652af-69c5-4f66-bdda-e1a768cbf5ac",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e66652af-69c5-4f66-bdda-e1a768cbf5ac",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:01:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"445fbc01-49b9-4a58-9bee-95c80bd4d4d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54832","PortSpecifier":{"PortValue":54832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54832","PortSpecifier":{"PortValue":54832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980128,"nanos":36159359},"http":{"id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d211eb-af58-4977-8145-e2d0372ed1ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980128,"nanos":73010065},"http":{"id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7515572-87de-4ac7-b8a1-485f7e1b7163","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045794de-0047-44a6-a089-297024a5b510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54838","PortSpecifier":{"PortValue":54838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"045794de-0047-44a6-a089-297024a5b510","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045794de-0047-44a6-a089-297024a5b510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54838","PortSpecifier":{"PortValue":54838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980128,"nanos":112848965},"http":{"id":"045794de-0047-44a6-a089-297024a5b510","method":"GET","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mYA3DZNLLrfo83MW_973W4OJaRPNkjVxzeAQccWvg3QDjnbR4HDzli5aam0q"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045794de-0047-44a6-a089-297024a5b510","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mYA3DZNLLrfo83MW_973W4OJaRPNkjVxzeAQccWvg3QDjnbR4HDzli5aam0q\"}"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b341e7d6-466e-455e-aae0-8d2127877269","keyName":"e2e-auth-iso-a-a070bb","subscription":"e2e-auth-iso-036c93","tenant":"e2e-shared-a-44ef67","userId":"b341e7d6-466e-455e-aae0-8d2127877269","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"045794de-0047-44a6-a089-297024a5b510","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-036c93"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045794de-0047-44a6-a089-297024a5b510","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045794de-0047-44a6-a089-297024a5b510","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045794de-0047-44a6-a089-297024a5b510","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33372","PortSpecifier":{"PortValue":33372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33372","PortSpecifier":{"PortValue":33372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980145,"nanos":138184262},"http":{"id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb33a1c2-b8f1-42ef-b2bb-2e8fd0bca86d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38010","PortSpecifier":{"PortValue":38010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceb422de-67df-49b1-a47d-078922dc46e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38010","PortSpecifier":{"PortValue":38010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980145,"nanos":170951356},"http":{"id":"ceb422de-67df-49b1-a47d-078922dc46e1","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb422de-67df-49b1-a47d-078922dc46e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980145,"nanos":206101317},"http":{"id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","method":"GET","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ju0JtZiB8AqXJevK_T5r5ul5yEc3HvOxiIydbObLeo3Ilc7GFMMMsPVQZ58S"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ju0JtZiB8AqXJevK_T5r5ul5yEc3HvOxiIydbObLeo3Ilc7GFMMMsPVQZ58S\"}"}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T22:02:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6862dd3a-d5ad-4db6-bbc3-2aa82e99cef1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34646","PortSpecifier":{"PortValue":34646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34646","PortSpecifier":{"PortValue":34646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980164,"nanos":351225922},"http":{"id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d3924f3-056e-4feb-b3d7-1e4b20e0a189","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39058","PortSpecifier":{"PortValue":39058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39058","PortSpecifier":{"PortValue":39058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980164,"nanos":386806575},"http":{"id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8271afb5-1dd0-4925-8108-21c6763ff4e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33200c17-768d-4a09-889e-d692ab34841e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34660","PortSpecifier":{"PortValue":34660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33200c17-768d-4a09-889e-d692ab34841e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33200c17-768d-4a09-889e-d692ab34841e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34660","PortSpecifier":{"PortValue":34660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980164,"nanos":421388682},"http":{"id":"33200c17-768d-4a09-889e-d692ab34841e","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33200c17-768d-4a09-889e-d692ab34841e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33200c17-768d-4a09-889e-d692ab34841e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33200c17-768d-4a09-889e-d692ab34841e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33200c17-768d-4a09-889e-d692ab34841e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33200c17-768d-4a09-889e-d692ab34841e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39060","PortSpecifier":{"PortValue":39060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39060","PortSpecifier":{"PortValue":39060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980164,"nanos":453421431},"http":{"id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:02:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90fb1d8e-5aa9-4572-b8b8-650a9695419e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55636","PortSpecifier":{"PortValue":55636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55636","PortSpecifier":{"PortValue":55636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980181,"nanos":478013675},"http":{"id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abdaa6ba-fa36-4c9e-a6c3-8418070b4658","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52966","PortSpecifier":{"PortValue":52966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"269bdecb-a07e-43de-a01a-77a80cf71023","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52966","PortSpecifier":{"PortValue":52966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980181,"nanos":513374054},"http":{"id":"269bdecb-a07e-43de-a01a-77a80cf71023","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"269bdecb-a07e-43de-a01a-77a80cf71023","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049a01a5-405b-4539-a933-94f72b55b32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52982","PortSpecifier":{"PortValue":52982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"049a01a5-405b-4539-a933-94f72b55b32b","method":"GET","path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049a01a5-405b-4539-a933-94f72b55b32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52982","PortSpecifier":{"PortValue":52982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980181,"nanos":551386988},"http":{"id":"049a01a5-405b-4539-a933-94f72b55b32b","method":"GET","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"049a01a5-405b-4539-a933-94f72b55b32b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"049a01a5-405b-4539-a933-94f72b55b32b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049a01a5-405b-4539-a933-94f72b55b32b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049a01a5-405b-4539-a933-94f72b55b32b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049a01a5-405b-4539-a933-94f72b55b32b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee01560-4828-4b2c-b571-18716ec39012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55638","PortSpecifier":{"PortValue":55638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ee01560-4828-4b2c-b571-18716ec39012","method":"GET","path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee01560-4828-4b2c-b571-18716ec39012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55638","PortSpecifier":{"PortValue":55638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980181,"nanos":585048566},"http":{"id":"1ee01560-4828-4b2c-b571-18716ec39012","method":"GET","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ee01560-4828-4b2c-b571-18716ec39012","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ee01560-4828-4b2c-b571-18716ec39012","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/00dacd6d-6586-47a8-8ef6-fba291d93566",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee01560-4828-4b2c-b571-18716ec39012","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee01560-4828-4b2c-b571-18716ec39012","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee01560-4828-4b2c-b571-18716ec39012","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33484","PortSpecifier":{"PortValue":33484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33484","PortSpecifier":{"PortValue":33484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980198,"nanos":586592793},"http":{"id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8b8623d-6663-41a5-a533-a65cf7430e6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36072","PortSpecifier":{"PortValue":36072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36072","PortSpecifier":{"PortValue":36072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980198,"nanos":619039545},"http":{"id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/auth-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2383d453-a09a-4b23-8741-7e6ac7e5c4d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33496","PortSpecifier":{"PortValue":33496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba578750-bd07-43e6-8c6a-c2781c90533a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33496","PortSpecifier":{"PortValue":33496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980198,"nanos":656320912},"http":{"id":"ba578750-bd07-43e6-8c6a-c2781c90533a","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T6EJeaHb7C6k8rf8_hLTyXTytiCr4p9T1VXrUjTpc21QboOGuq0J2dNKyZeH"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T6EJeaHb7C6k8rf8_hLTyXTytiCr4p9T1VXrUjTpc21QboOGuq0J2dNKyZeH\"}"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a82209d7-8513-4155-826a-007f9c6f8f1d","keyName":"e2e-auth-iso-a-ff212b","subscription":"e2e-auth-iso-7fc629","tenant":"e2e-shared-a-44ef67","userId":"a82209d7-8513-4155-826a-007f9c6f8f1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/auth-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7fc629"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:03:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba578750-bd07-43e6-8c6a-c2781c90533a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86a3b87a351a1098bbfc90d46d5dcfadd5720888d5a0a467d80b9ef8db4a2e64"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/630f5ba064cf3e6c0966e2d302d2e31d303ac6a58dc9a46735f7976869ff777c"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf670ac8c85dba927210656c96523b1414c524746cf2b163c1ff4d2262e2478"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9271caaf52b70a63b06bca291baaad976c54813836ad100cdf7eae98617d6cfd"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1589ebb011f7181461557a667fe9bd7d5b71c0e35b9c33804fa14a6eebbc060"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be297cfe8d7e6c87edce7d700acb9362829049a3e770294a850c4eb03cabcc6d"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d82f0e61b7a41cecc58dd1bf2733674752e3a2a4b9e6950e08230f1614cf05ad"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5fb795260aea27a3e920383110da08162021590e8b0e0ece93e950c08cf868"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7afa9b1674ec32fd242b462f73bc6ec36b5e3ebbfd0d7092050836123dc1b979"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1b61dc4855d91763c95137e24cc715ef4d62a3bacb3dae4a6a1ae90ce9d9ffa"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97e00d82b784ea218b71fef8ed9eda00c85aacd6ac49607550a428213b01c7b"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f330783cb5cfecc1de1deacefc7cfc4e255e465a93c78ef06e90a99d4dd5c12b"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea10eebc11f6e2c0dc05297a18ace4bbf6f8bbc663f480bf0565e8889b3a6a6"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/541995787d00ef95b979ccd55aee0950b5a07191e063ad3505eef5e40e5bf87e"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bed495ca5027dc26eb61cf6f3b4398efc8f31a46ad83eff082e4ee45113cfa3"}
{"level":"info","ts":"2026-07-13T22:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d02e8566bd425d7c862b2873aee4fff991d814a30e86edb8171938acf996a0"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"error","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"error","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"error","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"error","ts":"2026-07-13T22:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59f9659af28bf41d9f2caebef09ed29f1091dc1e22376ac3cf25896f1144ec8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59f9659af28bf41d9f2caebef09ed29f1091dc1e22376ac3cf25896f1144ec8"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d186e759965f9293385c5eb1fe6850f50cc021f99cf5da64ce565bb553c3e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d186e759965f9293385c5eb1fe6850f50cc021f99cf5da64ce565bb553c3e39"}
{"level":"error","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"}
{"level":"info","ts":"2026-07-13T22:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0912232c-ad97-4894-b86a-c6150cea4a01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980255,"nanos":923627296},"http":{"id":"0912232c-ad97-4894-b86a-c6150cea4a01","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/sub-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0912232c-ad97-4894-b86a-c6150cea4a01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718d5e0a-6157-9213-af64-679803d5edc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44724","PortSpecifier":{"PortValue":44724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"718d5e0a-6157-9213-af64-679803d5edc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718d5e0a-6157-9213-af64-679803d5edc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44724","PortSpecifier":{"PortValue":44724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980255,"nanos":959679740},"http":{"id":"718d5e0a-6157-9213-af64-679803d5edc4","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"718d5e0a-6157-9213-af64-679803d5edc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"718d5e0a-6157-9213-af64-679803d5edc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/sub-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718d5e0a-6157-9213-af64-679803d5edc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718d5e0a-6157-9213-af64-679803d5edc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718d5e0a-6157-9213-af64-679803d5edc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980255,"nanos":996155102},"http":{"id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","method":"GET","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aP8tLHeTMkA3fd1j_HbqAlWzxomgPd5KprZTx0aM0D8FycKoeHfdALetYSdS"}
{"level":"debug","ts":"2026-07-13T22:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aP8tLHeTMkA3fd1j_HbqAlWzxomgPd5KprZTx0aM0D8FycKoeHfdALetYSdS\"}"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12cfd9e9-b577-49e3-9d59-1f35075d5597","keyName":"e2e-sub-iso-337d61","subscription":"e2e-a-only-38bf01","tenant":"e2e-shared-a-44ef67","userId":"12cfd9e9-b577-49e3-9d59-1f35075d5597","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/sub-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-38bf01"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2df6e5b1-30d9-44a2-90df-6e12bab9055b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980256,"nanos":25116741},"http":{"id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","method":"GET","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PSruHdGiuy8aRdUd_pQbQfyTfzXzEM4ay5oW8wmYcAULjn6QRxKAKAun4pDo"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PSruHdGiuy8aRdUd_pQbQfyTfzXzEM4ay5oW8wmYcAULjn6QRxKAKAun4pDo\"}"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c068921a-a8ec-41c2-9a93-f78208e6aeb9","keyName":"e2e-sub-iso-685329","subscription":"e2e-b-only-38bf01","tenant":"e2e-shared-b-f0e328","userId":"c068921a-a8ec-41c2-9a93-f78208e6aeb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/sub-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-38bf01"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac1fa6a6-5e55-4c2d-b750-932f2de3e929","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beda645b-e633-458d-9834-7a886c60e8ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60174","PortSpecifier":{"PortValue":60174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beda645b-e633-458d-9834-7a886c60e8ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beda645b-e633-458d-9834-7a886c60e8ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60174","PortSpecifier":{"PortValue":60174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980265,"nanos":859793785},"http":{"id":"beda645b-e633-458d-9834-7a886c60e8ad","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beda645b-e633-458d-9834-7a886c60e8ad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beda645b-e633-458d-9834-7a886c60e8ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/sub-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beda645b-e633-458d-9834-7a886c60e8ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beda645b-e633-458d-9834-7a886c60e8ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beda645b-e633-458d-9834-7a886c60e8ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46944","PortSpecifier":{"PortValue":46944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46944","PortSpecifier":{"PortValue":46944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980265,"nanos":894097000},"http":{"id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/sub-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35e34581-b0f8-46e9-ac1e-0268afa9f0d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60176","PortSpecifier":{"PortValue":60176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60176","PortSpecifier":{"PortValue":60176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980265,"nanos":926511227},"http":{"id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dNF1THpF2FsX4RnK_LDBFu41hIFKp2RZr4Q52o1vy560YlV1AaBSr8rWctvG"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dNF1THpF2FsX4RnK_LDBFu41hIFKp2RZr4Q52o1vy560YlV1AaBSr8rWctvG\"}"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e42a22e-a2c9-424e-80b8-7c562e287778","keyName":"e2e-sub-iso-523474","subscription":"e2e-shared-sub-9c5aa4","tenant":"e2e-shared-a-44ef67","userId":"5e42a22e-a2c9-424e-80b8-7c562e287778","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/sub-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9c5aa4"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f0a43a2-a435-439a-b60d-c6e542bc9ed7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46948","PortSpecifier":{"PortValue":46948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42b20819-30ac-45a4-809d-a30e58e4a136","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46948","PortSpecifier":{"PortValue":46948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980265,"nanos":954471989},"http":{"id":"42b20819-30ac-45a4-809d-a30e58e4a136","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ac2sL6j7fZqd6IhE_1sS31xYgyiI05VEJgzCH3kg5zoQc6BftJ6gBS6gSzv4"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ac2sL6j7fZqd6IhE_1sS31xYgyiI05VEJgzCH3kg5zoQc6BftJ6gBS6gSzv4\"}"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5c898c63-91f3-44f0-8a06-9553b019266a","keyName":"e2e-sub-iso-4cd72f","subscription":"e2e-shared-sub-9c5aa4","tenant":"e2e-shared-b-f0e328","userId":"5c898c63-91f3-44f0-8a06-9553b019266a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/sub-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9c5aa4"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b20819-30ac-45a4-809d-a30e58e4a136","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/950963c118b5b6933f698ed8794dd507523c288f33fa636b911bc6da60a5ec40"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d13c0e1af9699c54d0a943b9c1fb531b85f94e5b366b40d6919b707cc532b0e"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/738fac799005c580e9094d7f7c213f86825dd2a404e751104be35ac25cef181c"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e495ebfbf32b611954444970e63abb1fa8c05aae897a116394c4afc7b2ba1d35"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22acd2fe59049357f07dc2a0e4a43de17eea8c91862a8e495f0ea696f8765dae"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f862b3ff3eb2305dd58c83db7541c6e51ebdf36c6446f4a51c88ed1d05828c26"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107794784e71f8c795991686a3ecf5758f3b11ad5682ccade7d418f7e23110f1"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/454292aab231196550af4dfdea6a46b66a2d38a2c73510366290e77a3fffcffb"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6728492b87293d66607a34b3a2ffb36c4b04dc77b710176129d13a5d908dc109"}
{"level":"info","ts":"2026-07-13T22:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93f2eeb51cd28d46f2bf16f5e5b434e68c3f5f810c945e999209aca11fdb2433"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/803912be01ed8dfc8b0649b5459463cd3e44a6e8d12a99553a72370d1fb41999"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e85a29f48e7fa51c4490e3504b0082f757691c41d72d4f8b8b8be14d326e3430"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19e4aa6da2e7c06b873bf19c7b000c9ee72ad5d57d6726f8a2455758b38c8f96"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f086b4efa621c3ab24f44db86e7f18b8e20968870db9f56e4890424736043136"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/176f29ec8e99b7891de5cfca3dd5107048f529209c420c6294f843ddbec4e4ca"}
{"level":"info","ts":"2026-07-13T22:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d605687509c35931d05cef1f111000f104a60a8605b84245d94c04728956836b"}
{"level":"debug","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"info","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"error","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"error","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:04:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:04:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"error","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d186e759965f9293385c5eb1fe6850f50cc021f99cf5da64ce565bb553c3e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d186e759965f9293385c5eb1fe6850f50cc021f99cf5da64ce565bb553c3e39"}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"debug","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59f9659af28bf41d9f2caebef09ed29f1091dc1e22376ac3cf25896f1144ec8"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59f9659af28bf41d9f2caebef09ed29f1091dc1e22376ac3cf25896f1144ec8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"debug","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}
{"level":"info","ts":"2026-07-13T22:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"}
{"level":"info","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"facf7868-91c6-4733-8eb6-d054a5022a31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980318,"nanos":950532580},"http":{"id":"facf7868-91c6-4733-8eb6-d054a5022a31","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facf7868-91c6-4733-8eb6-d054a5022a31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229e230c-90df-4430-b561-27adb2eb335b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49996","PortSpecifier":{"PortValue":49996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"229e230c-90df-4430-b561-27adb2eb335b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"229e230c-90df-4430-b561-27adb2eb335b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49996","PortSpecifier":{"PortValue":49996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980318,"nanos":989234740},"http":{"id":"229e230c-90df-4430-b561-27adb2eb335b","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"229e230c-90df-4430-b561-27adb2eb335b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"229e230c-90df-4430-b561-27adb2eb335b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"229e230c-90df-4430-b561-27adb2eb335b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229e230c-90df-4430-b561-27adb2eb335b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"229e230c-90df-4430-b561-27adb2eb335b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2522d55b-8531-4adf-8985-112cee291015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2522d55b-8531-4adf-8985-112cee291015","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2522d55b-8531-4adf-8985-112cee291015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57480","PortSpecifier":{"PortValue":57480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980319,"nanos":25226996},"http":{"id":"2522d55b-8531-4adf-8985-112cee291015","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2522d55b-8531-4adf-8985-112cee291015","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2\"}"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","subscription":"e2e-rate-iso-a-ee7429","tenant":"e2e-shared-a-44ef67","userId":"af92626e-10dc-43f3-8c29-a75caf000fb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2522d55b-8531-4adf-8985-112cee291015","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-ee7429\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2522d55b-8531-4adf-8985-112cee291015","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee7429"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2522d55b-8531-4adf-8985-112cee291015","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","selected_subscription":"e2e-rate-iso-a-ee7429","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-ee7429@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2522d55b-8531-4adf-8985-112cee291015","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2522d55b-8531-4adf-8985-112cee291015","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13bc63da-f14d-4252-8134-e44c6a46d02e","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57486","PortSpecifier":{"PortValue":57486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980320,"nanos":74725740},"http":{"id":"13bc63da-f14d-4252-8134-e44c6a46d02e","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2\"}"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","subscription":"e2e-rate-iso-a-ee7429","tenant":"e2e-shared-a-44ef67","userId":"af92626e-10dc-43f3-8c29-a75caf000fb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-ee7429\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee7429"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","selected_subscription":"e2e-rate-iso-a-ee7429","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-ee7429@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13bc63da-f14d-4252-8134-e44c6a46d02e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57498","PortSpecifier":{"PortValue":57498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57498","PortSpecifier":{"PortValue":57498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980321,"nanos":111758748},"http":{"id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SMILcKvvfu6AKIey_PKJUtffjTAypiCQnhd8lxTVISEhfjKEXXuGXPorb0v2\"}"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","subscription":"e2e-rate-iso-a-ee7429","tenant":"e2e-shared-a-44ef67","userId":"af92626e-10dc-43f3-8c29-a75caf000fb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-ee7429\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ee7429"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af92626e-10dc-43f3-8c29-a75caf000fb8","keyName":"e2e-rate-a-ee7429","selected_subscription":"e2e-rate-iso-a-ee7429","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-ee7429@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ee7429","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"013e932a-43e6-45bd-bcf0-5a9bf6b3bfce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57944","PortSpecifier":{"PortValue":57944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57944","PortSpecifier":{"PortValue":57944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980329,"nanos":691070568},"http":{"id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df7704d4-4536-48c2-bc8d-dc745bca8cbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49422","PortSpecifier":{"PortValue":49422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"209a114b-9fe6-4308-8095-cb8b480dc050","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49422","PortSpecifier":{"PortValue":49422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980329,"nanos":728463859},"http":{"id":"209a114b-9fe6-4308-8095-cb8b480dc050","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"]}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/399056712c87"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=690d4199-87db-4410-9a8b-f9bbbfc4eb8a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1a1f8564-e973-41ed-bd55-3911e95c06f8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"209a114b-9fe6-4308-8095-cb8b480dc050","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60911a24-83e0-4489-99d6-fa7b92560479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57952","PortSpecifier":{"PortValue":57952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60911a24-83e0-4489-99d6-fa7b92560479","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60911a24-83e0-4489-99d6-fa7b92560479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57952","PortSpecifier":{"PortValue":57952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980329,"nanos":764169722},"http":{"id":"60911a24-83e0-4489-99d6-fa7b92560479","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60911a24-83e0-4489-99d6-fa7b92560479","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60911a24-83e0-4489-99d6-fa7b92560479","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60911a24-83e0-4489-99d6-fa7b92560479","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60911a24-83e0-4489-99d6-fa7b92560479","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57964","PortSpecifier":{"PortValue":57964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55496915-9b31-4194-bf02-b4102ece9ae1","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57964","PortSpecifier":{"PortValue":57964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980330,"nanos":833519990},"http":{"id":"55496915-9b31-4194-bf02-b4102ece9ae1","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55496915-9b31-4194-bf02-b4102ece9ae1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9433a27-1901-44bc-9593-44caa71b2186","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57972","PortSpecifier":{"PortValue":57972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9433a27-1901-44bc-9593-44caa71b2186","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9433a27-1901-44bc-9593-44caa71b2186","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57972","PortSpecifier":{"PortValue":57972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980331,"nanos":876411437},"http":{"id":"a9433a27-1901-44bc-9593-44caa71b2186","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9433a27-1901-44bc-9593-44caa71b2186","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9433a27-1901-44bc-9593-44caa71b2186","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9433a27-1901-44bc-9593-44caa71b2186","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9433a27-1901-44bc-9593-44caa71b2186","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980332,"nanos":911939208},"http":{"id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3b70c58-3573-4cc9-afe0-9881e90033b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60318","PortSpecifier":{"PortValue":60318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60318","PortSpecifier":{"PortValue":60318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980333,"nanos":945616914},"http":{"id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b98d09c-fb5c-4455-b7e6-7dba690dd26c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60328","PortSpecifier":{"PortValue":60328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60328","PortSpecifier":{"PortValue":60328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980334,"nanos":982809519},"http":{"id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98dc9dd9-3597-490e-be11-6e5c009f44c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60332","PortSpecifier":{"PortValue":60332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e08525-8a55-4dbb-b93b-253575af0fab","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60332","PortSpecifier":{"PortValue":60332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980336,"nanos":18713308},"http":{"id":"e3e08525-8a55-4dbb-b93b-253575af0fab","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e08525-8a55-4dbb-b93b-253575af0fab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32628dde-a85b-4999-a2e5-7233a4f482e9","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60336","PortSpecifier":{"PortValue":60336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980337,"nanos":54897065},"http":{"id":"32628dde-a85b-4999-a2e5-7233a4f482e9","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32628dde-a85b-4999-a2e5-7233a4f482e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ef3e26-362a-438f-87d6-721a6689cd91","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980338,"nanos":90978607},"http":{"id":"42ef3e26-362a-438f-87d6-721a6689cd91","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ef3e26-362a-438f-87d6-721a6689cd91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","method":"POST","path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions","host":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980339,"nanos":128517006},"http":{"id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","method":"POST","headers":{":authority":"e2e-shared-a-44ef67.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YijaJtWy17Hfexqo_J5Xo52AVmrh50M6rwqhzYFG4uG7XKmAM1LHnybDNFrV\"}"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","subscription":"e2e-rate-iso-a-f140cc","tenant":"e2e-shared-a-44ef67","userId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\",\"requestedSubscription\":\"e2e-rate-iso-a-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44ef67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-44ef67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f29d90d-4a67-4c12-9888-4ed87a0f8f20","keyName":"e2e-rate-a-f140cc","selected_subscription":"e2e-rate-iso-a-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-a-44ef67/e2e-rate-iso-a-f140cc@ai-tenant-e2e-shared-a-44ef67/rate-test-model-44ef67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44ef67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f140cc","namespace":"ai-tenant-e2e-shared-a-44ef67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c1262a-9dcf-411e-ab87-771a8b028af3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49702","PortSpecifier":{"PortValue":49702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","method":"POST","path":"/ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328/v1/completions","host":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49702","PortSpecifier":{"PortValue":49702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783980339,"nanos":163895522},"http":{"id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","method":"POST","headers":{":authority":"e2e-shared-b-f0e328.apps.90cdb254-0673-4cb5-829b-399056712c87.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17DnqDGeumbHwsWOy_8e902M7ejUWgI6dhuNnLUxDZzLf70dbmS9erUREb8Uo"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17DnqDGeumbHwsWOy_8e902M7ejUWgI6dhuNnLUxDZzLf70dbmS9erUREb8Uo\"}"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2e555ea-4ddc-4a5b-aa01-9f42f221f30c","keyName":"e2e-rate-b-f140cc","subscription":"e2e-rate-iso-b-f140cc","tenant":"e2e-shared-b-f0e328","userId":"d2e555ea-4ddc-4a5b-aa01-9f42f221f30c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328\",\"requestedSubscription\":\"e2e-rate-iso-b-f140cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0e328.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f0e328","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f140cc","namespace":"ai-tenant-e2e-shared-b-f0e328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f0e328/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f140cc"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2e555ea-4ddc-4a5b-aa01-9f42f221f30c","keyName":"e2e-rate-b-f140cc","selected_subscription":"e2e-rate-iso-b-f140cc","selected_subscription_key":"ai-tenant-e2e-shared-b-f0e328/e2e-rate-iso-b-f140cc@ai-tenant-e2e-shared-b-f0e328/rate-test-model-f0e328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f0e328","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f140cc","namespace":"ai-tenant-e2e-shared-b-f0e328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:05:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0f5e58e-d434-4a0a-8f6b-16d88edf09b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818ab780d2764176ece19c9ecf1f4e7b40b318323c07cf46c491e45cd6b2e7cf"}
{"level":"info","ts":"2026-07-13T22:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaca0db86e69c9967785c4cc0b9ab92cd6fcdc7a3ed0f57ff9027604ee70437c"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0d6e586ea4885531713721da0edd9b3c134f549f35b5f170e0ccfb9c58d39a7"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0230fb385edd493d79e05ed9c0cd0e63570c9dd1784f0711f305a3aa3d199cf2"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26f514ea7a80feb2a7a24b3d13358b5314a7ff974fd39b30f4144e13ce15e32d"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cf5673fe4fc5526bac69b374c3a0a3a238796dda7cd3ac3e96e26677eb6bf72"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa42c5bb70564658d8402436395fca7bad93e1b4dd7963f558af7a635f11762c"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed6a46de873ae8893b3b021c2e814928055ceed50524a161241b223fa68e3177"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d504298d6fb8dfda9dc21a6bc9bfdb9755d81cd5b9a467d2fa0bf9204ef7fc36"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a111fc3e0459c1e24b0be2150a28d7278948be5db3a78f4ffd9838322e0b865e"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9921a4c4e184cb4ffac68872cc995101abafde232a72376d09e2704c1cb8f99f"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0c7d4c9512c4f722b661d3b38e1940f7cf7a560b37c02f44db744282622baca"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04055b703f60a314c8f7af342b6f1e128948f097215a0711463b43bcb5fb747a"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e3bc616bd25180dab289dfe783b0af541d34299d1ea0b2a4f0bcad14cf68615"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ed45eff00a4c79d2ecaec0ec5430a7675699ac55c01f2c39ac67aa17a42a82"}
{"level":"info","ts":"2026-07-13T22:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29cd70821b77bbedb334f60a15f77a0d8fcd1f81d3affd7f45cfe64115cbda76"}
{"level":"info","ts":"2026-07-13T22:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc3d0e6e4c90831623f909e8135e6a93f30e70e9ae8b85f52efecfad84c4bcf"}
{"level":"info","ts":"2026-07-13T22:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f66e0467e508d4810641b779ccd0fd373a79eade0600c330831cf09869023b7"}
{"level":"info","ts":"2026-07-13T22:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59f9659af28bf41d9f2caebef09ed29f1091dc1e22376ac3cf25896f1144ec8"}
{"level":"info","ts":"2026-07-13T22:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d186e759965f9293385c5eb1fe6850f50cc021f99cf5da64ce565bb553c3e39"}
{"level":"info","ts":"2026-07-13T22:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e530e68565d7c3478114a12b60d84aab3e363eda127255ff3d157697d2142a14"}
{"level":"info","ts":"2026-07-13T22:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc81350bd84dc07a39b4c9cd86fdcebfd5d5680689d2911bdead7cf109ac0cce"}
{"level":"info","ts":"2026-07-13T22:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16f161b9726293de06d5feccc12eb5b1bb8b6cd2d8428c33e42c8cdf9d20ec73"}
{"level":"info","ts":"2026-07-13T22:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b42933b786984f30f6aea746c55ab3a825b967fe78da31a3bdc9ba0b2b2d2b6"}