--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303"}
{"level":"info","ts":"2026-07-13T20:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"debug","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f"}
{"level":"debug","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0"}
{"level":"error","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"error","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"debug","ts":"2026-07-13T20:54:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:54:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:54:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45154","PortSpecifier":{"PortValue":45154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68a75dbd-5fee-4657-90fe-02763289c6c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45154","PortSpecifier":{"PortValue":45154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976089,"nanos":375797802},"http":{"id":"68a75dbd-5fee-4657-90fe-02763289c6c6","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68a75dbd-5fee-4657-90fe-02763289c6c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50378","PortSpecifier":{"PortValue":50378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc95144b-b0bc-4020-975e-4380ccb87673","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50378","PortSpecifier":{"PortValue":50378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976089,"nanos":441634923},"http":{"id":"fc95144b-b0bc-4020-975e-4380ccb87673","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc95144b-b0bc-4020-975e-4380ccb87673","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45158","PortSpecifier":{"PortValue":45158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f115b0ef-446e-4a41-95c3-9805707122ca","method":"GET","path":"/maas-api/v1/api-keys/823902fc-cc62-46fc-93ab-486230954853","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45158","PortSpecifier":{"PortValue":45158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976089,"nanos":506757954},"http":{"id":"f115b0ef-446e-4a41-95c3-9805707122ca","method":"GET","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/823902fc-cc62-46fc-93ab-486230954853",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/823902fc-cc62-46fc-93ab-486230954853",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f115b0ef-446e-4a41-95c3-9805707122ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","method":"GET","path":"/maas-api/v1/api-keys/c96ee386-0310-484c-9d7a-582d7d1d99db","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976089,"nanos":539729588},"http":{"id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","method":"GET","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c96ee386-0310-484c-9d7a-582d7d1d99db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c96ee386-0310-484c-9d7a-582d7d1d99db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:54:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b68b82a-5f55-4dae-ace3-3348f9e7ac5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86020f2d-bc76-4bdb-be78-893bfec86669","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976108,"nanos":800491201},"http":{"id":"86020f2d-bc76-4bdb-be78-893bfec86669","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86020f2d-bc76-4bdb-be78-893bfec86669","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55632","PortSpecifier":{"PortValue":55632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55632","PortSpecifier":{"PortValue":55632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976108,"nanos":842634892},"http":{"id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8f169c5-6afd-4bb0-b9f2-871bc3b83713","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41486","PortSpecifier":{"PortValue":41486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41486","PortSpecifier":{"PortValue":41486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976108,"nanos":876799554},"http":{"id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","method":"GET","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HXLGFwxot6obZQ8P_WDf2HZwxANbPaLhNn8X5z7lUcYhePE4fHw1z22rbJLd"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HXLGFwxot6obZQ8P_WDf2HZwxANbPaLhNn8X5z7lUcYhePE4fHw1z22rbJLd\"}"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f831582-a48a-4651-8b09-784c9943d20a","keyName":"e2e-auth-iso-a-e8bf53","subscription":"e2e-auth-iso-22fb41","tenant":"e2e-shared-a-264ac7","userId":"1f831582-a48a-4651-8b09-784c9943d20a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-22fb41"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1403f96d-2fc7-4fd7-80cf-8d841910c83e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3d53e08-823f-4b83-9b76-8879d7955529","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976126,"nanos":27573571},"http":{"id":"a3d53e08-823f-4b83-9b76-8879d7955529","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d53e08-823f-4b83-9b76-8879d7955529","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976126,"nanos":67234483},"http":{"id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6e8bf2-9e97-46ca-9df8-e9be4c2ec6f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976126,"nanos":101764184},"http":{"id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","method":"GET","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GwRihF9AkgZNuvx4_60aQ9arvlUhB38boOOfywtMIdjZxtY1w7ZFxrkZaHOt"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GwRihF9AkgZNuvx4_60aQ9arvlUhB38boOOfywtMIdjZxtY1w7ZFxrkZaHOt\"}"}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T20:55:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4202f07-ea7b-46bc-b0d3-a61580e79a34","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59344","PortSpecifier":{"PortValue":59344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59344","PortSpecifier":{"PortValue":59344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976143,"nanos":265349756},"http":{"id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d900a841-d6e3-42be-aa78-dffcfdaad4cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32790","PortSpecifier":{"PortValue":32790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32790","PortSpecifier":{"PortValue":32790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976143,"nanos":300616587},"http":{"id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b41c16-f0dc-43da-856e-7c58bcb4b33a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59358","PortSpecifier":{"PortValue":59358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59358","PortSpecifier":{"PortValue":59358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976143,"nanos":346806550},"http":{"id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae6e94b1-a9da-424d-a0c1-300eb6c761e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32800","PortSpecifier":{"PortValue":32800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32800","PortSpecifier":{"PortValue":32800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976143,"nanos":384642662},"http":{"id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3588fddf-1847-4376-8c94-5df4e7ce6ec3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49178","PortSpecifier":{"PortValue":49178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49178","PortSpecifier":{"PortValue":49178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976160,"nanos":538070067},"http":{"id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c397d5c4-14c8-4f87-b034-08f0eb7d2b22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58392","PortSpecifier":{"PortValue":58392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58392","PortSpecifier":{"PortValue":58392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976160,"nanos":590973465},"http":{"id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e3d1be6-f5d2-4718-a3d6-86d0dfae2932","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58400","PortSpecifier":{"PortValue":58400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","method":"GET","path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58400","PortSpecifier":{"PortValue":58400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976160,"nanos":627715116},"http":{"id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","method":"GET","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f50020b-a6a0-40fc-ab56-3cc3371c2907","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05cb419-e9ab-4914-8201-b947697955e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49186","PortSpecifier":{"PortValue":49186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c05cb419-e9ab-4914-8201-b947697955e0","method":"GET","path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05cb419-e9ab-4914-8201-b947697955e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49186","PortSpecifier":{"PortValue":49186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976160,"nanos":665114829},"http":{"id":"c05cb419-e9ab-4914-8201-b947697955e0","method":"GET","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c05cb419-e9ab-4914-8201-b947697955e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c05cb419-e9ab-4914-8201-b947697955e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9a1c0fde-64d7-4ee6-9a3c-ab1f39872c8f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05cb419-e9ab-4914-8201-b947697955e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05cb419-e9ab-4914-8201-b947697955e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05cb419-e9ab-4914-8201-b947697955e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60994","PortSpecifier":{"PortValue":60994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60994","PortSpecifier":{"PortValue":60994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976175,"nanos":687862562},"http":{"id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b1d28d-b0b0-4661-a98d-c9a328fe2153","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47156","PortSpecifier":{"PortValue":47156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47156","PortSpecifier":{"PortValue":47156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976175,"nanos":726382092},"http":{"id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/auth-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c863534e-27ec-4e8e-8cc8-19444a577b2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32770","PortSpecifier":{"PortValue":32770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9d43512-3f10-483c-8000-f92600ffa19f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32770","PortSpecifier":{"PortValue":32770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976175,"nanos":762688575},"http":{"id":"f9d43512-3f10-483c-8000-f92600ffa19f","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6LrF11RcG1AYJ7K2_Fc6BMLc7wRtAQNiCQvo4DmJs4KdfEUz8UChkmZgAj5Y"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6LrF11RcG1AYJ7K2_Fc6BMLc7wRtAQNiCQvo4DmJs4KdfEUz8UChkmZgAj5Y\"}"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed3da419-1398-4151-b44e-16b7cbaef171","keyName":"e2e-auth-iso-a-280a40","subscription":"e2e-auth-iso-98df37","tenant":"e2e-shared-a-264ac7","userId":"ed3da419-1398-4151-b44e-16b7cbaef171","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/auth-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-98df37"}
{"level":"info","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:56:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d43512-3f10-483c-8000-f92600ffa19f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d5ee6e754139fd2c1b1b8193f85de8c715ef4bda10d4e0bafef7dacc4ea78a6"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf3cc4ca4b7b2b335d9bae1fb6c79ac498661c6a5f09746f6653af1335deecef"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc81ce26962e47d4b639c436ee614aac4e7e53367ef5a1391e574a330e890c97"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8300e3088df633f46993f9de2344eddf00028fb309c31805bc40c8480e320e01"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62434aa45438c2c86ece07a38fb11208afe2641f5e1fe2dffb2651c9dc90d5e3"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b84ab16eb456dae7cec2fccbfaa4be50972dacf0795ea7c1f9ad7f9f8266912"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2445fb616455cf58da82de1a9ef172c5675c0facc36bfdc58d91b92dbdc16303"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c08827ba7f9ea1a90a05ec90d63889d57a6c8a80a3b074b0c4734aafde14f936"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a670adb8b2135f4350dcd14d66748b3d4f2524164b35972e282193f61bf120f"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca554323d68a0273607fd18cbb94fea17731e93d277a3eac9272b4f326756b0"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d33f76a8c45f5ca86c97c09cb137593e879290870338b49e3c8624184e9dde0b"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d262c5a3a02d4be1fa7b381cbed589816abed4210298572c5008ce77f010c2"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e5275569476850a4046f29b5016a1bca3723fd221e6e8e9f4360cf75faee5e"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d832962616eceae106cedf2a28d25806d17da73525be85d20d23fafa55bca8db"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/790c87b5a5554b555d64f29de386acee33738958076c14952bb202d04545f292"}
{"level":"info","ts":"2026-07-13T20:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f882900970742542a1a0b0bc5db14fb926769d29b51d567e80ed502616d230de"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"error","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:56:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:56:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"error","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"}
{"level":"info","ts":"2026-07-13T20:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3eabe87467679aae395ad15ced8c3a8ef18edff56bc6fde418997545e6a21cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3eabe87467679aae395ad15ced8c3a8ef18edff56bc6fde418997545e6a21cf"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc4a4b2f4544c7aed1d33c1c5162cc5a0020e2578a1771c286bfe17f5a10305","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc4a4b2f4544c7aed1d33c1c5162cc5a0020e2578a1771c286bfe17f5a10305"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8"}
{"level":"info","ts":"2026-07-13T20:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976251,"nanos":849800376},"http":{"id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/sub-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"469f0f70-f09e-48ef-bc62-0e164cf8af33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55978","PortSpecifier":{"PortValue":55978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51c16730-006f-4f87-9dc5-d78466afc60f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55978","PortSpecifier":{"PortValue":55978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976251,"nanos":897341942},"http":{"id":"51c16730-006f-4f87-9dc5-d78466afc60f","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/sub-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51c16730-006f-4f87-9dc5-d78466afc60f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46124","PortSpecifier":{"PortValue":46124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b4eee44-0c50-4237-9996-35c9982958a0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46124","PortSpecifier":{"PortValue":46124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976251,"nanos":940572290},"http":{"id":"9b4eee44-0c50-4237-9996-35c9982958a0","method":"GET","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1971DJAI5aA0C4JdM_XatDVn0TOaaDwkDcmxWzdt09TjgOWg6Ox7c2ef9vi4s"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1971DJAI5aA0C4JdM_XatDVn0TOaaDwkDcmxWzdt09TjgOWg6Ox7c2ef9vi4s\"}"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8eea365a-48bd-4c2b-ad62-9f914c120b87","keyName":"e2e-sub-iso-6ed92e","subscription":"e2e-a-only-3c183d","tenant":"e2e-shared-a-264ac7","userId":"8eea365a-48bd-4c2b-ad62-9f914c120b87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/sub-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-3c183d"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4eee44-0c50-4237-9996-35c9982958a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55982","PortSpecifier":{"PortValue":55982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55982","PortSpecifier":{"PortValue":55982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976251,"nanos":983128244},"http":{"id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","method":"GET","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YIq3ZT40rc4Kb5ol_Uh4v275RXy2mi2olXJiyaNMEEjAy1pYqUwA26NRoGsh"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YIq3ZT40rc4Kb5ol_Uh4v275RXy2mi2olXJiyaNMEEjAy1pYqUwA26NRoGsh\"}"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18153d6a-6d89-463e-b6bf-d5c6395af8b3","keyName":"e2e-sub-iso-624d8c","subscription":"e2e-b-only-3c183d","tenant":"e2e-shared-b-11843d","userId":"18153d6a-6d89-463e-b6bf-d5c6395af8b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/sub-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-3c183d"}
{"level":"info","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9627ea2-5aaf-4ae5-a367-2d684eb6540c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976270,"nanos":493677089},"http":{"id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/sub-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7334e1-1abe-4f0c-af92-e36e99e25e3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56672","PortSpecifier":{"PortValue":56672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56672","PortSpecifier":{"PortValue":56672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976270,"nanos":533901556},"http":{"id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/sub-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2e9eee-76de-4eb9-983b-34ce10b6b9c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976270,"nanos":568989347},"http":{"id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Jd0sdSVi1H2OuZl3_KhAvc3g5gb6tDcbNRxWsPyhYhqAhbOYxBWWXwIsgD5o"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Jd0sdSVi1H2OuZl3_KhAvc3g5gb6tDcbNRxWsPyhYhqAhbOYxBWWXwIsgD5o\"}"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c0eac4bf-1f75-4df9-ad0b-424785c65d01","keyName":"e2e-sub-iso-3f039d","subscription":"e2e-shared-sub-8da15a","tenant":"e2e-shared-a-264ac7","userId":"c0eac4bf-1f75-4df9-ad0b-424785c65d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/sub-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8da15a"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74912d3-72b5-4d39-b46c-71e66c5bdba7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56686","PortSpecifier":{"PortValue":56686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a95abec3-22c1-4ba8-bfd4-49585895f553","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56686","PortSpecifier":{"PortValue":56686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976270,"nanos":605488609},"http":{"id":"a95abec3-22c1-4ba8-bfd4-49585895f553","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mNqNLTmef948S7K_INrYWdbGecfg4P8KISmek6anKltoYLfkkQ82hagnvtv"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mNqNLTmef948S7K_INrYWdbGecfg4P8KISmek6anKltoYLfkkQ82hagnvtv\"}"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8c93b49b-4130-434c-ab0a-36b129616005","keyName":"e2e-sub-iso-0f4746","subscription":"e2e-shared-sub-8da15a","tenant":"e2e-shared-b-11843d","userId":"8c93b49b-4130-434c-ab0a-36b129616005","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/sub-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8da15a"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a95abec3-22c1-4ba8-bfd4-49585895f553","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"debug","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d543c22aeb586ecea905994484261033034733fe61ec19573590b56a8d47b325"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7b6547f8057590f60eb37be3dc54501f3d8656bd61941e9e083aa8292b28d12"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a6a49a1723f7ca78c254cbcaa1f04920f4122ca464445fa17880fa393ecdb0"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c2735164d878d006598038c2a9832e8ec99371a124de5e72fd5f127fa3169dd"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86800ffd0a4fe863aef9f19caee473a29dc01ceacb4e5b0976feb4ac6b5d7af8"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1864288addf083fa1cc1c6b63dbe4a8ad29edf43ee49d37d3a3f17da19aed92b"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b54ed55b8885f7cc686a05bbc10e072e64af7a31c597df5785a7f71f8adc8851"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23266dde5b0e7368f6c2463148b6abfa4af09a8093acfd1c7d456b528d8e4ef1"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d21a6e798937ffa79d5ab340b887f925645f76c744f1913da3d6292528138039"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70db9a74f7386c122afbb3eb3c82f82984283251f640f0db9c0f0819224bc998"}
{"level":"info","ts":"2026-07-13T20:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe7947b5ae9aa915478022f7f8980dae4777958ed0591055ed7189f9178635c6"}
{"level":"info","ts":"2026-07-13T20:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5eb21206031cfcafe9b44e5954f9314aa48995af4ec33b0fd06688f4581aa59"}
{"level":"info","ts":"2026-07-13T20:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d9b0a47b4a613d9e8e90fd35ff375af3341deff54035c492302d76b2494f350"}
{"level":"info","ts":"2026-07-13T20:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c05ecb6c8c21549e86798bc6b868bce8a7e436ebeea4756e460e849b172ddde"}
{"level":"info","ts":"2026-07-13T20:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d48c200dc6baa716aa1e732db84dbda785f42a39a0d0789a1bd469e3afc942e"}
{"level":"info","ts":"2026-07-13T20:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b76ae17f5ec1d825642d21f30c3797936452c2364941f79bd039a646dbe4ca"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"error","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"error","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"}
{"level":"info","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"error","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d"}
{"level":"error","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"error","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"debug","ts":"2026-07-13T20:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T20:58:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3eabe87467679aae395ad15ced8c3a8ef18edff56bc6fde418997545e6a21cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc4a4b2f4544c7aed1d33c1c5162cc5a0020e2578a1771c286bfe17f5a10305","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3eabe87467679aae395ad15ced8c3a8ef18edff56bc6fde418997545e6a21cf"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc4a4b2f4544c7aed1d33c1c5162cc5a0020e2578a1771c286bfe17f5a10305"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"debug","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"info","ts":"2026-07-13T20:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42862","PortSpecifier":{"PortValue":42862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"625818fd-c685-49fe-a373-2a610f2f91b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42862","PortSpecifier":{"PortValue":42862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976328,"nanos":805733394},"http":{"id":"625818fd-c685-49fe-a373-2a610f2f91b9","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"625818fd-c685-49fe-a373-2a610f2f91b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"786c5991-9150-47d2-b25f-c927737f0bf2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976328,"nanos":847482732},"http":{"id":"786c5991-9150-47d2-b25f-c927737f0bf2","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"786c5991-9150-47d2-b25f-c927737f0bf2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78571105-9b6e-431e-a97e-65626db5c71c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42876","PortSpecifier":{"PortValue":42876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78571105-9b6e-431e-a97e-65626db5c71c","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78571105-9b6e-431e-a97e-65626db5c71c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42876","PortSpecifier":{"PortValue":42876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976328,"nanos":887691404},"http":{"id":"78571105-9b6e-431e-a97e-65626db5c71c","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2\"}"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","subscription":"e2e-rate-iso-a-32360f","tenant":"e2e-shared-a-264ac7","userId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-32360f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78571105-9b6e-431e-a97e-65626db5c71c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32360f"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78571105-9b6e-431e-a97e-65626db5c71c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","selected_subscription":"e2e-rate-iso-a-32360f","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-32360f@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78571105-9b6e-431e-a97e-65626db5c71c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78571105-9b6e-431e-a97e-65626db5c71c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42882","PortSpecifier":{"PortValue":42882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42882","PortSpecifier":{"PortValue":42882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976329,"nanos":946525883},"http":{"id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2\"}"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","subscription":"e2e-rate-iso-a-32360f","tenant":"e2e-shared-a-264ac7","userId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-32360f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32360f"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","selected_subscription":"e2e-rate-iso-a-32360f","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-32360f@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e6d0ff1-4ade-4b9d-896d-77507e5a0ff9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42896","PortSpecifier":{"PortValue":42896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c361c29-1068-99a4-bcd2-3acc730d796a","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42896","PortSpecifier":{"PortValue":42896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976330,"nanos":992110296},"http":{"id":"5c361c29-1068-99a4-bcd2-3acc730d796a","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2"}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cRAKkpfD4nKI5RSR_QJE32bE2fX482vUZE6csQV2eKaVTMSAPw1uGnI9l1C2\"}"}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","subscription":"e2e-rate-iso-a-32360f","tenant":"e2e-shared-a-264ac7","userId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-32360f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-32360f"}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75115332-f5ee-4ba3-8ed6-bc79017336fa","keyName":"e2e-rate-a-32360f","selected_subscription":"e2e-rate-iso-a-32360f","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-32360f@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-32360f","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c361c29-1068-99a4-bcd2-3acc730d796a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01d3425e-8393-469b-ab43-07b1598a5d1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976339,"nanos":693626117},"http":{"id":"01d3425e-8393-469b-ab43-07b1598a5d1e","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01d3425e-8393-469b-ab43-07b1598a5d1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36202","PortSpecifier":{"PortValue":36202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36202","PortSpecifier":{"PortValue":36202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976339,"nanos":731879573},"http":{"id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c01f974-7f86-46d8-be1d-e450557af995","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"]}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/91274731742f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=051e8c12-7e10-4ce4-a449-eb63604745da"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c01f974-7f86-46d8-be1d-e450557af995","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c89b52d-d98d-44d8-96d1-86ae26d26885","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976339,"nanos":770206306},"http":{"id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:58:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e7beff-3b3d-49bb-98c9-06d6515771fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976340,"nanos":811425267},"http":{"id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714bf3b1-dc3a-4a73-be03-033f1018d4b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38508","PortSpecifier":{"PortValue":38508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38508","PortSpecifier":{"PortValue":38508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976341,"nanos":856736740},"http":{"id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c4393ba-4aad-4d52-bd4d-f4abe7f800cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38510","PortSpecifier":{"PortValue":38510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38510","PortSpecifier":{"PortValue":38510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976342,"nanos":903577877},"http":{"id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47e6d791-f570-4c2a-a644-0b3974ffbf8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38516","PortSpecifier":{"PortValue":38516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976343,"nanos":947034277},"http":{"id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec4805db-15a0-4aeb-b5fd-785aeea90f3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b402994-f392-4e1e-8afc-907239ae3711","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38520","PortSpecifier":{"PortValue":38520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b402994-f392-4e1e-8afc-907239ae3711","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b402994-f392-4e1e-8afc-907239ae3711","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38520","PortSpecifier":{"PortValue":38520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976344,"nanos":982599126},"http":{"id":"7b402994-f392-4e1e-8afc-907239ae3711","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b402994-f392-4e1e-8afc-907239ae3711","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b402994-f392-4e1e-8afc-907239ae3711","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b402994-f392-4e1e-8afc-907239ae3711","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b402994-f392-4e1e-8afc-907239ae3711","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38532","PortSpecifier":{"PortValue":38532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","method":"POST","path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions","host":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38532","PortSpecifier":{"PortValue":38532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976346,"nanos":19019696},"http":{"id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","method":"POST","headers":{":authority":"e2e-shared-a-264ac7.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wpbc7UqTb6fxBXsk_MGvVZERFwN8No0F2VH0KlF6J5IOD88I0zsT65hdwkzS\"}"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","subscription":"e2e-rate-iso-a-ecf499","tenant":"e2e-shared-a-264ac7","userId":"391fb68d-4b58-42db-9496-bc1137f5e639","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\",\"requestedSubscription\":\"e2e-rate-iso-a-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-264ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"391fb68d-4b58-42db-9496-bc1137f5e639","keyName":"e2e-rate-a-ecf499","selected_subscription":"e2e-rate-iso-a-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-a-264ac7/e2e-rate-iso-a-ecf499@ai-tenant-e2e-shared-a-264ac7/rate-test-model-264ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-264ac7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ecf499","namespace":"ai-tenant-e2e-shared-a-264ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a9840f1-7c1b-44da-bfe1-ac816df13416","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36216","PortSpecifier":{"PortValue":36216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","method":"POST","path":"/ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d/v1/completions","host":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36216","PortSpecifier":{"PortValue":36216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783976346,"nanos":57426907},"http":{"id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","method":"POST","headers":{":authority":"e2e-shared-b-11843d.apps.e462d0dc-7a4b-4f96-bebf-91274731742f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2gzY3fgPaXghouJO_QYApSmfT200TFYxGwtkTnPBoj60of5YV7sAarhNTm6E"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2gzY3fgPaXghouJO_QYApSmfT200TFYxGwtkTnPBoj60of5YV7sAarhNTm6E\"}"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10140c1c-b85f-49ce-b75a-348cea83c63b","keyName":"e2e-rate-b-ecf499","subscription":"e2e-rate-iso-b-ecf499","tenant":"e2e-shared-b-11843d","userId":"10140c1c-b85f-49ce-b75a-348cea83c63b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d\",\"requestedSubscription\":\"e2e-rate-iso-b-ecf499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11843d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-11843d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecf499","namespace":"ai-tenant-e2e-shared-b-11843d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ecf499"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10140c1c-b85f-49ce-b75a-348cea83c63b","keyName":"e2e-rate-b-ecf499","selected_subscription":"e2e-rate-iso-b-ecf499","selected_subscription_key":"ai-tenant-e2e-shared-b-11843d/e2e-rate-iso-b-ecf499@ai-tenant-e2e-shared-b-11843d/rate-test-model-11843d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-11843d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ecf499","namespace":"ai-tenant-e2e-shared-b-11843d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T20:59:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e0b6ed-39ab-4cd5-ac4a-0264673fbccb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T20:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d01d3924be1a4293f24c89b8a7d711910d37bfba9ff6aa690491c9ca41a23782"}
{"level":"info","ts":"2026-07-13T20:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d571bb5602b8565ad48ec75d560692e85990812bab2bb299098a6d32bb2da4c"}
{"level":"info","ts":"2026-07-13T20:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0267bb4e0ba400dc6c93e384bb52f353dc63ae8162c2c72d4e9cce3e3c32257f"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6e24332ec3cba827630af0cb79f73bdffd557a3fd59e3c968b3793af31f3588"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2650fbc0eb1d53739d5ea09be1a5afe5f503fe9abad28a527155608ed328f5"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90435cb0ec6e4321cb7a086e902e457c03b719ccf9a94c385257f52de2fc3f5c"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cf8450c6573077b0cb54f0437c45a33d16e8a38c65efb8ac64652da5e1c21db"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97c818d83d18a7a031fe52113e341a390ae53cf5292b2a78d1302eb01a395aaa"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5553fd6a6eb6d344bc6666ef31136755a7496ac1b60093845b30cec918245cf6"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d947278bb5014e721efb6ce1e324bbb5c4105684fd4ac7508fc47fcd3746dc99"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35c058b8d696a64139eee24ca93d9953f8947f4f41ad1a923a12f6418ddf188e"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23ace1d142d70aeecff844b35f86de4762d550f2ec211d10328f1c342ade1d49"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/680f85f9ea9f7e28623f7930735265922ffc93898466983dd206d20dac7b8ba5"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fc4fbad3bbb5621d6508d5aa92cecf7c62cb3619f4462634ff3fe26b2cc1449"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcdab6760c0dab98e6138fed89e41f3ea866ee564f44be8c916540842f08e7d"}
{"level":"info","ts":"2026-07-13T20:59:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5433ace0942accc245b9d7b3e20ed31dfd5e59628e9f9bbcf0a22b36cba53975"}
{"level":"info","ts":"2026-07-13T20:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d0b330d9bd3523f4b473563ee03bec95ded0f288cb1ef4866fa876147471acc"}
{"level":"info","ts":"2026-07-13T20:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2969fcd279b300a52687324fc1efd148b8f2b031110ce18d8351d4206a67cbef"}
{"level":"info","ts":"2026-07-13T20:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc4a4b2f4544c7aed1d33c1c5162cc5a0020e2578a1771c286bfe17f5a10305"}
{"level":"info","ts":"2026-07-13T20:59:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3eabe87467679aae395ad15ced8c3a8ef18edff56bc6fde418997545e6a21cf"}
{"level":"info","ts":"2026-07-13T21:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0983c96e28fbf104a816f76b9a97d22e1b01805843b7c311e219f2d63fce1c6b"}
{"level":"info","ts":"2026-07-13T21:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fbf07ad1ff3717ac0787417d056747061de27ec15012ad36fdabbab3d3d45b4"}
{"level":"info","ts":"2026-07-13T21:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc79dc620ce90b6f99203cd19e11f4dde808c0fe11a2c307d8c9ad1317d47593"}
{"level":"info","ts":"2026-07-13T21:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35fa0295bc33843490f787b933f600580fee7605b6d891fbd9c34018e8cd0661"}